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T S7/5/ALL 



7/5/1 (Item 1 from file: 347) 

DIALOG (R) File 347:JAPIO 

(c) 2003 JPO & JAPIO. All rts. reserv. 

07322460 **Image available** 

PRINTING METHOD FOR PREVENTING DOCUMENT FORGERY 



PUB. NO. : 
PUBLISHED: 
INVENTOR (s) : 



APPLICANT (s) 
APPL. NO. : 
FILED: 
PRIORITY: 



INTL CLASS: 



2002-190947 [JP 2002190947 A] 
July 05, 2002 (20020705) 
LUNT TERESA F 
FRANKLIN MATTHEW K 
HECHT DAVID L 
BERSON THOMAS A 
STEFIK MARK J 
DEAN R DREWS 
BELL ALAN G 
BREUEL THOMAS M 
CASS TODD A 
CURRY DOUGLAS N 
GREENE DANIEL H 
KRIVACIC ROBERT T 
XEROX CORP 

2001-290056 [JP 20011290056] 
September 21, 2001 (20010921) 
00 722362 [US 2000722362], US 
November 28, 2000 (20001128) 
00 722508 [US 2000722508], US 
November 28, 2000 (20001128) 
H04N-001/387; B41J-005/30; B41J-029/00; 
G06F-003/12; G06T-001/00; H04N-001/40 



(United States of America) , 
(United States of America), 
B41J-029/38; 



ABSTRACT 



PROBLEM TO BE SOLVED: To provide a printing method for appropriately 
preventing document forgery in accordance with a printed document. 

SOLUTION: A protection level which is to be applied to the document is 
decided from a plurality of protection levels by considering the value of 
the printed document, the latent possibility of forgery with respect to the 
document and cost for forgery prevention. A printer printing a watermark: 
corresponding to the decided protection level is selected. The respective 
pages of the document are printed by using the printer. A mechanism for 
generating the evidence of copy and tracking information are incorporated 
in the watermark in accordance with the protection level. 



COPYRIGHT: (C) 2002, JPO 



7/5/2 (Item 2 from file: 347) 

DIALOG (R) File 347: JAPIO 

(c) 2003' JPO & JAPIO. All rts. reserv. 

07208706 **Image available** 

ENCRYPTING SYSTEM AND METHOD THEREFOR BASED ON TRANSITION STATE 

PUB. NO.: 2002-077138 [JP 2002077138 A] 

PUBLISHED: March 15, 2002 (20020315) 
INVENTOR (s): BERSON THOMAS A 
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APPLICANT (s) 
APPL . ■ no'. : 
FILED: 
PRIORITY: 



INTL CLASS: 



DEAN R DREWS 
FRANKLIN MATTHEW K 
LUNT TERESA F 
SMETTERS DIANA K 
XEROX CORP 

2001-170639 [JP 20011170639] 
June 06, 2001 (20010606) 

00 596834 [US 2000596834], US (United States of America), 

June 19, 2000 (20000619) 

H04L-009/16; G06F-012/00; G06F-012/14 



ABSTRACT 



PROBLEM TO BE SOLVED: To provide an encrypting system and method therefor 
based on a step in application containing at least one state having a 
relational key. 

SOLUTION: When the application reaches a state, access requirement is 
transmitted to a server by using a networJc. The requirement contains a 
state key relating to this state. A reply mail responding to the 
requirement is received from the server. The reply mail contains an access 
key for providing access when the state key is valid. 

COPYRIGHT: (C) 2002, JPO 



7/5/3 (Item 3 from file: 347) 

DIALOG (R) File 347:JAPIO 

(c) 2003 JPO & JAPIO. All rts. reserv. 

06939505 **Image available** 

METHOD FOR PROVIDING SAFE ACCESS TO ONLINE CONTENTS REFERRED TO IN HARD 
COPY DOCUMENT 

PUB. NO.: 2001-167052 [JP 2001167052 A] 

PUBLISHED: June 22, 2001 (20010622) 
INVENTOR (s): GREENE DANIEL H 

DEAN R DREWS 

BERSON THOMAS A 
APPLICANT (s) : XEROX CORP 

APPL. NO.: 2000-323407 [JP 2000323407] 
FILED: October 24, 2000 (20001024) 

PRIORITY: 99 429539 [US 99429539], US (United States of America), 

October 28, 1999 (19991028) 
INTL CLASS: G06F-015/00; G06F-003/12 



PROBLEM TO BE SOLVED: To provide safe access to online contents referred to 
in a hard copy document. 

SOLUTION: The first request of access to the online contents referred to in 
the hard copy document is received, a challenge to the first request to the 
online contents is issued, a first password extracted from a password 
mechanism in the hard copy document in response to this issued challenge is 
received. Further, a state change for the password mechanism of the hard 
copy document is provided for identifying a second password to be used 
during the second request of access to the online contents referred to in 
the hard copy document. Thus, safe access to the online contents referred 
to in the hard copy document is provided. 



ABSTRACT 
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7/5/4 (Item 1 from file: 348) 

DIALOG (R) File 348: EUROPEAN PATENTS 

(c) 2003 European Patent Office. All rts. reserv. 

01649276 

Ad hoc secure access to documents and services 

Ad hoc Sicherheitszugrif f auf Dokxunente und Dienste 

Acces securise ad hoc a des documents et des services 

PATENT ASSIGNEE: 

Xerox Corporation, (219004), Patent Department, Xerox Square - 20 A, 100. 
Clinton Avenue South, Rochester, New York 14644, (US), (Applicant 
designated States: all) 
INVENTOR': 

Stringer, Mark, 5 Shenstone House, Staffordshire St., Cambridge CBl IBP, 
(GB) 

Soutloglou, Elisabeth, 142 Aynsley Gardens, Church Langley, Harlow CM17 
9PE, (GB) 

Smetters, Diana K., 952 Laguna Avenue, Burlingame, CA 94010, (US) 
LEGAL REPRESENTATIVE: 

Skone James, Robert Edmund (50281), GILL JENNINGS & EVERY Broadgate House 
7 Eldon Street, London EC2M 7LH, (GB) 
PATENT (CC, No, Kind, Date): EP 1357458 A2 031029 (Basic) 
APPLICATION (CC, No, Date) : EP 2003252327 030411; 
PRIORITY (CC, No, Date) : US 63361 020416 

DESIGNATED STATES: AT; BE; BG; CH; CY; CZ; DE; DK; EE; ES; FI; FR; GB; GR; 

HU; IE; IT; LI; LU; MC; NL; PT; RO; SE; SI; SK; TR 
EXTENDED DESIGNATED STATES: AL; LT; LV; MK 
INTERNATIONAL PATENT CLASS: G06F-001/00 

ABSTRACT EP 1357458 A2 

A document server (102) residing on a network behind a firewall (112) 
provides secure access to documents or services residing thereon. A first 
user (A) outside the firewall communicates with the document server (102) 
over an established first secure session to generate a token in a 
database (124) of tokens on the document server. The first user (A) 
digitally signs the public key of a second user (B) and an identifier of 
the token. The first user transmits a URL token to the second user that 
identifies the location of the document (102) server and the token 
identifier. When the second user outside the firewall (112) redeems the 
URL token at the document server, the document server and the second user 
establish a second secure session. The document server (102) 
authenticates the URL token against the second secure session before 
providing the second user with access to the document or service. 

ABSTRACT WORD COUNT: 152 

NOTE: 

Figure number on first page: 1 
LEGAL STATUS (Type, Pub Date,- Kind, Text) : 

Application: 031029 A2 Published application without search report 

LANGUAGE ( Publication, Procedural , Application) : English; English; English 
FULLTEXT AVAILABILITY: 

Available Text Language Update Word Count 

CLAIMS A (English) 200344 992 

SPEC A (English) 200344 5845 
Total word count - document A 6837 
Total word count - document B 0 
Total word count - documents A + B 6837 
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7/5/5 (Item 2 from file: 348) 

DIALOG (R) File 348: EUROPEAN PATENTS 

(c) 2003 European Patent Office. All rts . reserv. 

01619514 

Method for securing communication over a network medium 
Verfahren zur Sicherung von Kommunikation viber ein Netzwerk 
Procede pour la securisation de la communication sur un reseau 

PATENT ASSIGNEE: 

Xerox Corporation, (219787), Xerox Square - 20A, 100 Clinton Avenue South 
, Rochester, New York 14644, (US), (Applicant designated States: all) 
INVENTOR: 

Balfanz, Dirk, 600 Sharon Park Drive, Apt. D-103, Menlo Park, CA 94025 

• (US) 

Lopes, Cristina V., 27 Twain Street, Irvine, CA 92612, (US) 
Smetters, Diana K., 952 Laguna Avenue, Burlingame, CA 94010, (US) 
Stewart, Paul Joseph, 864 Louise Drive, Sunnyvale, California 94087, (US) 
Wong, Hao-Chi, 368 Cedar Street, San Carlos, CA 94070, (US) 

LEGAL REPRESENTATIVE: 

Skone James, Robert Edmund (50281), GILL JENNINGS & EVERY Broadgate House 
7 Eldon Street, London EC2M 7LH, (GB) 

PATENT (CC, No, Kind, Date) : EP 1335563 A2 030813 (Basic) 

EP 1335563 A3 031015 

APPLICATION (CC, No, Date) : EP 2003250701 030204; 

PRIORITY' (CC, No, Date) : US 66699 020206 

DESIGNATED STATES: AT; BE; BG; CH; CY; CZ; DE; DK; EE; ES; FI ; FR; GB; GR; 

HU; IE; IT; LI; LU; MC; NL; PT; SE; SI; SK; TR 
EXTENDED DESIGNATED STATES: AL; LT; LV; MK; RO 
INTERNATIONAL PATENT CLASS: H04L-029/06; H04L-012/22 

ABSTRACT EP 1335563 A2 

Pre-authentication information of devices (310,320) is used to securely 
authenticate arbitrary peer-to-peer ad-hoc interactions. In one ■ 
embodiment, public key cryptography is used in the main wireless link 
(340) with location-limited channels (330) being initially used to 
pre-authenticate devices. 

ABSTRACT WORD COUNT: 39 

NOTE: 

Figure number on first page: 1 

LEGAL STATUS (Type, Pub Date, Kind, Text) : 
Application: 030813 A2 Published application without search report 

Change: 030827 A2 Inventor information changed: 20030708 

Search Report: 031015 A3 Separate publication of the search report 

LANGUAGE ( Publication, Procedural , Application) : English; English; English 

FULLTEXT AVAILABILITY: 

Available Text Language Update Word Count 

CLAIMS A (English) 200333 572 

SPEC A (English) 200333 5979 
Total word count - document A 6551 
Total word count - document B ' 0 

Total word count - documents A + B 6551 



7/5/6 (Item 3 from file: 348) 

DIALOG (R) File 348: EUROPEAN PATENTS 

(c) 2003 European Patent Office. All rts. reserv. 

01571620 
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SYSTEMS AND METHODS FOR IDENTITY -BASED ENCRYPTION AND RELATED CRYPTOGRAPHIC 
TECHNIQUES 

SYSTEMES ET PROCEDES DE CRYPTAGE SUR LA BASE DES IDENTITES, ET PROCEDURES 
CRYPTOGRAPHIQUES ASSOCIEES 

PATENT ASSIGNEE: 

THE BOARD OF TRUSTEES OF THE LELAND STANFORD JUNIOR UNIVERSITY, (242254) 
900 Welch Road, Suite 350, Stanford, CA 94304, (US), (Applicant 
designated States: all) 
INVENTOR: 

BONEH, Dan, Gates 475, Stanford, CA 94305-9045, (US) 
FRANKLIN, Matthew, 3021 Engineering II, Davis, CA 95616 (US) 
PATENT (CO, No, Kind, Date) : 

WO 2003017559 030227 
APPLICATION (CC, No, Date): EP 2002794941 020813; WO 2002US27155 020813 
PRIORITY (CC, No, Date) : US 311946 P 010813 

DESIGNATED STATES: AT; BE; BG; CH; CY; CZ; DE; DK; EE; ES; FI; FR; GB; GR • 

IE; IT> LI; LU; MC; NL; PT 
EXTENDED DESIGNATED STATES: AL; LT; LV; MK; RO; SI 
INTERNATIONAL PATENT CLASS: H04L-001/00 
LEGAL STATUS (Type, Pub Date, Kind, Text): 
Application: 030423 A2 International application. (Art. 158(1)) 

Application: 030423 A2 International application entering European 

phase 

LANGUAGE ( Publication, Procedural, Application) : English; English; English 



7/5/7 (Item 4 from file: 348) 

DIALOG (R) File 348: EUROPEAN PATENTS 

(c) 2003 European Patent Office. All rts. reserv. 

01481810 

SECURE AUTHENTICATION OF USERS VIA INTERMEDIATE PARTIES 

AUTHENTIFICATION SECURISEE D * UTILISATEURS VIA DES PARTIES INTERMEDIAIRES 

PATENT ASSIGNEE: 

fusionOne, Inc., (3239430), 55 Almaden Boulevard - Suite 800, San Jose, 
California 95113, (US), (Applicant designated States: all) 
INVENTOR : 

BERSON, Thomas, A., 764 Forest Avenue, Palo Alto, CA 94301, (US) 
RUDY, Stephen, M. , 1631 Cowper Street, Palo Alto, CA 94301, (US) 
PATENT (CC, No, Kind, Date) : 

WO 2002037749 020510 
APPLICATION (CC, No, Date) : EP 2001993084 011102; WO 2001US46094 011102 
PRIORITY (CC, No, Date) : US 245949 P 001103 

DESIGNATED STATES: AT; BE; CH; • CY; DE; DK; ES; FI ; FR; GB; GR; IE; IT; LI; 

LU; MC; NL; PT; SE; TR 
EXTENDED DESIGNATED STATES: AL; LT; LV; MK; .RO; SI 
INTERNATIONAL. PATENT CLASS: H04L-009/32 
LEGAL STATUS (Type, Pub Date, Kind, Text) : 
Application: 021030 Al International application. (Art. 158(1)) 

Application: 021030 Al International application entering European 

phase 

Application: 031217 Al International application. (Art. 158(1)) 

Appl Changed: 031217 Al International application not entering European 

phase 

Withdrawal: 031217 Al Date application deemed withdrawn: 20030604 

LANGUAGE ( Publication, Procedural , Application ) : English; English; English 



7/5/8 (Item 5 from file: 348) 

DIALOG (R) File 348: EUROPEAN PATENTS 
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(c) 2003 European Patent Office. All rts. reserv. 
01371867 

System, method and article of manufacture for transition state-based 
cryptography 

System, Verfahren und Produkt zur ubergangszustandsbasierten Geheimschrif t 
Systeme, precede et produit pour la cryptographie basee sur I'etat de 
transition 

PATENT ASSIGNEE: 

Xerox Corporation, (219787), Xerox Square - 20A, 100 Clinton Avenue South 
, Rochester, New York 14644, (US), (Applicant designated States: all) 
INVENTOR : 

Berson, Thomas A., 764 Forest Avenue, Palo Alto, CA 94301, (US) 
Dean, R. Drews, 21070 White Fir Court, Cupertino, CA 95014, (US) 
Franklin, Matthew K., 334 Grant Avenue, Palo Alto, CA 94306, (US) 
Lunt, Teresa F., 892 Bruce Drive, Palo Alto, CA 94303, (US) 
Smetters, Diana K. , 952 Laguna Avenue, Burlingame, CA 94010, (US) 

LEGAL REPRESENTATIVE: 

Skone James, Robert Edmund (50281), GILL JENNINGS & EVERY Broadgate House 
7 Eldon Street, London EC2M 7LH, (GB) 

PATENT (CC, No, Kind, Date) : EP 1168140 A2 020102 (Basic) 

EP 1168140 A3 030226 

APPLICATION (CC, No, Date) : EP 2001305072 010611; 

PRIORITY (CC, No, Date) : US 596834 000619 

DESIGNATED STATES: DE; FR; GB 

EXTENDED DESIGNATED STATES: AL; LT; LV; MK; RO; SI 
INTERNATIONAL PATENT CLASS: G06F-001/00 

ABSTRACT EP 1168140 A2 

A system, method and article of manufacture are provided for transition 
state-based cryptography in an application including at least one state 
having a state key associated with it. A request for access (308) is sent 
to a server utilizing a network upon reaching a state in the application. 
The request includes a state key associated with the state. A reply (312) 
is received from the server in response to the request. The reply 
includes an access key for providing the access if the state key is 
valid. According to another embodiment of the present invention, a method 
is provided for transition state-based cryptography in an application 
including at least one state having a state key associated with it. A 
request for access is received from a client to a server utilizing a 
network. The state key is verified at the server. A reply is sent from 
the server in response to the request. The reply includes an access key 
for providing the access if the state key is verified. In one aspect of 
the present invention, the request for access is for a subsequent state 
in the application. 

ABSTRACT WORD COUNT: 189 

NOTE : 

Figure number on first page: 3 

LEGAL STATUS (Type, Pub Date, Kind, Text) : 
Application: 020102 A2 Published application without search report 

Search Report: 030226 A3 Separate publication of the search report 
Examination: 031029 A2 Date of request for examination: 20030826 

LANGUAGE ( Publication, Procedural , Application ) : English; English; English 

FULLTEXT AVAILABILITY: 

Available Text Language Update Word Count 

CLAIMS A (English) 200201 332 

SPEC A (English) 200201 3622 
Total word count - document A 3954 
Total word count - document B 0 



http://vAvw.dialogclassic.com/main.vmgw 



12/22/03 



DialogClassic Web(tm) 



Page 7 of 45 



Total word count - documents A + B 3954 

7/5/9 (Item 6 from file: 348) 

DIALOG (R) File 348: EUROPEAN PATENTS 

(c) 2003 European Patent Office. All rts . reserv, 

01285625 

SENSOR WITH DIGITAL SIGNATURE OF DATA RELATING TO SENSOR 
SENSOR MIT DIGITALER SIGNATUR VON SENSORBEZOGENEN DATEN 
DETECTEUR A SIGNATURE NUMERIQUE DE DONNEES RELATIVES AU DETECTEUR 

PATENT ASSIGNEE: 

MALLINCKRODT INC., (1382204), 675 McDonnell Blvd, Hazelwood, MO 63042, 
(US), (Applicant designated States: all) 
INVENTOR: 

BERSON, Thomas, A., 764 Forest Avenue, Palo Alto, CA 94301, (US) 
OLSON, Bryan, 400 E. Remington Drive F-155, Sunnyvale, CA 94087, (US) 
FEIN, Michael, E., , deceased, (US) 

MANNHEIMER, Paul, D., 4119 Sugar Maple Drive, Danville, CA 94506, (US) 
• PORGES, Charles, E., 61 Mira Loma, Orinda, CA 94563, (US) 

SCHLOEMER, David, 16301 Dearborn Drive, Stilwell, KS 66085, (US) 

FEIN, Marcia, 1613 Hollingsworth Drive, Mountain View, CA 94040, (US) 
LEGAL REPRESENTATIVE: 

Rees, Alexander Ellison et al (73903), Urquhart-Dykes & Lord, 30 Welbeck 
Street, London WIG 8ER, (GB) 
PATENT (CC, No, Kind, Date) : EP 1215995 Al 020626 (Basic) 

WO 200122873 010405 . 
APPLICATION (CC, No, Date) : , EP 2000968534 000928; WO 2000US27017 000928 
PRIORITY (CC, No, Date) : US 156488 P 990928; US 662246 P 000914 
DESIGNATED STATES: AT; BE; CH; CY; DE; DK; ES; FI; FR; GB; GR; IE; IT; LI; 

LU; MC; NL; PT; SE 
EXTENDED DESIGNATED STATES: AL; LT; LV; MK; RO; SI 
INTERNATIONAL PATENT CLASS: A61B-005/00; G06F-001/00 
CITED PATENTS (WO A) : XP 2161210 
CITED REFERENCES (WO A) : 

EP 949506 A 

US 4942877 A 

US 4700708 A 

MENEZES, VAN OORSCHOT, VANS T ONE : "HANDBOOK OF APPLIED CRYPTOGRAPHY" BOCA 
RATON, FL, CRC PRESS, US, 1997, XP002161210 ISBN: 0-8493-8523-7; 
NOTE: 

No A-document published by EPO 
LEGAL STATUS (Type, Pub Date, Kind, Text) : 
Application: 010530 Al International application. (Art. 158(1)) 

Application: 010530 Al International application entering European 

phase 

Application: 020626 Al Published application with search report 

Examination: 020626 Al Date of request for examination: 20020409 

Change: 020724 Al Inventor information changed: 20020607 

LANGUAGE ( Publication, Procedural , Application ) : English; English; English 



7/5/10 (Item 7 from file: 348) 

DIALOG (R) File 348: EUROPEAN PATENTS 

(c) 2003 European Patent Office. All rts. reserv. 

01272837' 

System for authenticating online content referenced in hardcopy docioments 
System zur Beglaubigung des Online-Inhalts der in einem bedrukten Dokiament 
referenziert ist 
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Systeme d» authentif ication d»un contenu en ligne reference dans un document 
imprlme 

PATENT ASSIGNEE: 

Xerox Corporation, (219788), Xerox Square - 20A, 100 Clinton Avenue South 
, Rochester, New York 14644, (US), (Applicant designated States: all) 
INVENTOR: 

Greene, Daniel H., 1055 Manet Drive 6, Sunnyvale, California 94087, (US) 
Dean, R. Drews, 21070 White Fir Court ,' Cupertino, California 95014, (US) 
Berson, Thomas A., 764 Forest Avenue, Palo Alto, California 94301, (US) 

LEGAL REPRESENTATIVE: 

Grunecker, Kinkeldey, Stockmair & Schwanhausser Anwaltssozietat (100721) 
, Maximilianstrasse 58, 80538 Munchen, (DE) 

PATENT (CC, No, Kind, Date) : EP 1096358 Al 010502 (Basic) 

APPLICATION (CC, No, Date) : EP 123263 001026; 

PRIORITY (CC, No, Date) : US 429539 991028 

DESIGNATED STATES: DE; FR; GB 

EXTENDED DESIGNATED STATES: AL; LT; LV; MK; RO; SI 
INTERNATIONAL PATENT CLASS: G06F-001/00 

ABSTRACT EP 1096358 Al 

A system for controlling access to online content referenced in a 
hardcopy document. A user requesting access to online content available 
on a server responds to an authentication challenge from the server using 
a password mechanism printed in the hardcopy document. The password 
mechanism allows the user to identify a password for responding to an 
authentication request by the server. After authenticating the user, the 
server initiates a state change to enable subsequent access to the online 
content by the user with a different password that is also identified 
with the password mechanism. 

ABSTRACT WORD COUNT: 94 

NOTE : 

Figure number on first page: 2 

LEGAL STATUS (Type, Pub Date, Kind, Text) : 
Application: 010502 Al Published application with search report 

Examination: 010801 Al Date of request for examination: 20010522 

LANGUAGE ( Publication, Procedural , Application ) : English; English; English 

FULLTEXT AVAILABILITY: 

Available Text Language Update Word Count 

CLAIMS A (English) 200118 517 

SPEC A (English) 200118 6725 
Total word count - document A 7242 
Total word count - document B 0 
Total word count - documents A + B 7242 



7/5/11 (Item 8 from file: 348) 

DIALOG (R) File 348: EUROPEAN PATENTS 

(c) 2003 European Patent Office. All rts. reserv. 

01210673 

Method for enabling privacy and trust in electronic communities 
Verfahren zum Ermoglichen von Geheimhaltung und Vertrauen in elektronischen 
Gemeinschaf ten 

Methode pour parvenir a I'intimite et a la confiance dans des communautes 
electroniques 

PATENT ASSIGNEE: 

Xerox Corporation, (219787), Xerox Square - 20A, 100 Clinton Avenue South 
, Rochester, New York 14644, (US), (Applicant designated States: all) 
INVENTOR: 
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Huberman, Bernardo A., 483 Forest Avenue, Apt.C, Palo Alto CA94301, (US) 
Franklin, Matthew K., 334 Grant Avenue, Palo Alto CA94306, (US) 
Hogg, Tad H., 541 Del Medio, Mountain View CA94040, (US) 

LEGAL REPRESENTATIVE: 

Grunecker, Kinkeldey, Stockmair & Schwanhausser Anwaltssozietat (100721) 
, Maximilianstrasse 58, 80538 Munchen, (DE) 

PATENT (CC, No, Kind, Date) : EP 1052582 A2 001115 (Basic) 

EP 1052582 A3 030716 

APPLICATION (CC, No, Date) : EP 2000110372 000515; 

PRIORITY (CC, No, Date) : US 134179 P 990513; US 568794 000509 

DESIGNATED STATES: AT; BE; CH; CY; DE; DK; ES; FI ; FR; GB; GR; IE; IT; LI; 
LU; MC; NL; PT; SE 

EXTENDED DESIGNATED STATES: AL; LT; LV; MK; RO; SI 

INTERNATIONAL PATENT CLASS: G06F-017/60 

ABSTRACT EP 1052582 A2 

A method for enabling privacy and trust in electronic communities is 
disclosed. A major impediment to using recommendation systems and 
. collective knowledge for electronic commerce is the reluctance of 
individuals to reveal preferences in order to find groups of people that 
share them. An equally important barrier to fluid electronic commerce is 
the lack of agreed upon trusted third parties. We propose new non-third 
party mechanisms to overcome these barriers. Our solutions facilitate 
finding shared preferences, discovering communities with shred values, 
removing disincentives posed by liabilities, and negotiating on behalf of 
a group. We adapt known techniques from the cryptographic literature to 
enable these new capabilities. 

ABSTRACT WORD COUNT: 107 

NOTE: 

Figure number on first page: 1 

LEGAL STATUS (Type, Pub Date, Kind, Text) : 
Application: 001115 A2 Published application without search report 

Priority: 001220 A2 Priority information changed: 20001101 

Search Report: 030716 A3 Separate publication of the search report 

LANGUAGE ( Publication, Procedural , Application) : English; English; English 

FULLTEXT AVAILABILITY: 

Available Text Language Update Word Count 

CLAIMS A (English) 200046 502 

SPEC A (English) 200046 6508 
Total word count - document A 7010 
Total word count - document B 0 
Total word count - documents A + B 7010 
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(c) 2003 European Patent Office-. All rts . reserv. 

00969645 

METHOD AND APPARATUS FOR SIMULTANEOUS ELECTRONIC EXCHANGE USING A 

SEMI-TRUSTED THIRD PARTY 
VERFAHREN UND EINRICHTUNG 2UM GLEICHZEITIGEN ELEKTRONISCHEN AUSTAUSCH UNTER 

VERWNDUNG EINES HALBGLAUBWURDIGEN DRITTEN TEILNEHMERS 
PROCEDE ET DISPOSITIF CORRESPONDANT POUR ECHANGE ELECTRONIQUE SIMULTANE 

FAISANT INTERVENIR UNE TIERCE PERSONNE DE NIVEAU DE CONFIANCE MITIGE 
PATENT ASSIGNEE: 

AT&T Corp., (589370), 32 Avenue of the Americas, New York, NY 10013-2412, 
(US), (Applicant designated States: all) 
INVENTOR : 
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FRANKLIN, Matthew, Keith, Apartment 20D, 1 University Place, New York, 
NY 10003, (US) 

REITER, Michael, Kendrick, 4 Bluebird Way, Raritan, NJ 08869, (US) 
PATENT (CC, No, Kind, Date) : 

WO 9827688 980625 
APPLICATION (CC, No, Date) : WO 97953257 971211; WO 97US23220 971211 
PRIORITY (CC, No, Date) : US 768380 961217 

DESIGNATED STATES: AT; BE; CH; DE; DK; ES; FI; FR; GB; GR; IE; IT; LI; LU; 

MC; NL; PT; SE 
INTERNATIONAL PATENT CLASS: H04L-009/32; G07F-019/00 
CITED PATENTS (WO A) : JP 9325694 A 
CITED REFERENCES (WO A) : 

LUBY M ET AL: "How to simultaneously exchange a secret bit by flipping a 
symmetrically-biased coin" 24TH ANNUAL SYMPOSIUM ON FOUNDATIONS OF 
COMPUTER SCIENCE, TUCSON, AZ, USA, 7-9 NOV. 1983, ISBN 0-8186-0508-1, 
1983, SILVER SPRING, MD, USA, IEEE COM PUT . SOC . PRESS, USA, pages 
11-21, XP002066262 cited in the application 
ZHOU J ET AL: "A FAIR NON- REPUDIATION PROTOCOL" PROCEEDINGS OF THE 1996 
IEEE SYMPOSIUM ON SECURITY AND PRIVACY, 07VKLAND, CA. , MAY 6 - 8, 1996, 
no. SYMP. 17, 6 May 1996, INSTITUTE OF ELECTRICAL AND ELECTRONICS 
ENGINEERS, pages 55-61, XP000634833; 
LEGAL STATUS (Type, Pub Date, Kind, Text) : 
Application: 20000412 A2 International application. (Art. 158(1)) 

Application: 981125 A2 International application (Art. 158(1)) 

Withdrawal: 20000412 A2 Date application deemed withdrawn: 19990719 

Appl Changed: 20000412 A2 International application not entering 

European phase 

LANGUAGE ( Publication, Procedural , Application) : English; English; English 

7/5/13 (Item 1 from file: 349) 

DIALOG (R) File 349:PCT FULLTEXT 

(c) 2003 WIPO/Univentio. All rts . reserv. 

00993956 **Image available** 
SYSTEM AND METHOD FOR SECURING A COMMUNICATION CHANNEL 

SYSTEME ET PROCEDE PERMETTANT DE SECURISER UN CANAL DE COMMUNICATION 

Patent Applicant/Assignee: 

WAVE7 OPTICS INC, 1075 Windward Ridge Parkway, Suite 170, Alpharetta, GA 
30005, US, US (Residence), US (Nationality) 
Inventor (s) : 

THOMAS Stephen A, 4397 Windsor Oaks Circle, Marietta, GA 30350, US, 
BERSON Thomas A, 764 Forest Avenue, Palo Alto, CA 94301, US, 
ANTHONY Deven J, 330 Oakridge Terrace, Alpharetta, GA 30005, US, 
GONG Guang,' 412 Woodrow Drive, Waterloo, Ontario N2T 2V7, CA, 
FARMER James 0, 3602 Preston Court, Lilburn, GA 30047, US, 

Legal Representative : 

WIGMORE Steven P (agent). King & Spalding, 191 Peachtree Street, Atlanta, 
GA 30303-1763, US, 

Patent and Priority Information (Country, Number, Date) : 

Patent: WO 200323980 A2-A3 20030320 (WO 0323980) 

Application: WO 2002US28734 20020910 (PCT/WO US0228734) 

Priority Application: US 2001318447 20010910; US 2002388497 20020614 

Designated States: AE AG AL AM AT AU AZ BA BB BG BR BY BZ CA CH CN CO CR CU 
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KR KZ LC LK LR LS LT LU LV MA MD MG MK MN MW MX MZ NO NZ OM PH PL PT RO 
RU SD SE SG SI SK SL TJ TM TN TR TT TZ UA UG UZ VC VN YU ZA ZM. ZW 
(EP) AT BE BG CH CY CZ DE DK EE ES FI FR GB GR IE IT LU MC NL PT SE SK TR 
(OA) BF BJ CF CG CI CM GA GN GQ GW ML MR NE SN TD TG 
(AP) GH GM KE LS MW MZ SD SL SZ TZ UG ZM ZW 
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(EA) AM AZ BY KG KZ MD RU TJ TM 
Main International Patent Class: H04L-009/00 
Publication Language: English 
Filing Language: English 
Fulltext Availability: 

Detailed Description 

Claims 

Fulltext Word Count: 19010 
English Abstract 

A system and method establishes a secure communication channel over an 
optical network (140) . More specifically, the system and method can 
generally include securing a communications (140) channel to prevent 
unauthorized access such as eavesdropping or masquerading by employing 1) 
an encryption scheme derived from the non-linear filtering of shift 
registers, 2) a method for authenticating and exchanging parameters 
between two parties over an unsecured data channel for deriving a shared 
encryption key having a property of perfect forward secrecy, and 3) 
employing a unique format of the messages that can transport non-secret 
key exchange parameters (1135, 1140) over an unsecured data channel and 
secure' communications over a data channel. 

French Abstract 

L' invention concerne un systeme et un procede permettant d'etablir un 
canal de communication securise sur un reseau optique (140) . Lesdits 
systeme et procede consistent, de maniere generale, a securiser un canal 
de communication (140) afin d*empecher un acces non autorise, tel qu ' une 
interception illicite ou une usurpation d'identite, par utilisation 1) 
d'un mecanisme de cryptage derive du filtrage non lineaire de registres 
de decalage, 2) d'un procede d ' authentif ication et d'echange de 
parametres entre deux parties sur un canal de donnees non securise pour 
deriver une cle de cryptage partagee possedant une propriete de 
conf identialite parfaite sur I'aval, et 3) d'un format unique de messages 
pouvant transporter des parametres d'echange de cle non secrete (1135), 
(.1140) sur un canal de donnees non securise et des communications 
securisees sur un canal de donnees. 

Legal Status (Type, Date, Text) 

Publication 20030320 A2 Without international search report and to be 

republished upon receipt of that report. 
Search Rpt 20031218 Late publication of international search report 
Republication 20031218 A3 With international search report. 

7/5/14 (Item 2 from file: 349) 

DIALOG (R) File 349:PCT FULLTEXT 

(c) 2003 WIPO/Univentio. All rts. reserv. 

00987636 **Image available** 
SYSTEMS AND hlETHODS FOR IDENTITY -BASED ENCRYPTION AND RELATED CRYPTOGRAPHIC 
TECHNIQUES 

SYSTEMES ET PROCEDES DE CRYPTAGE SUR LA BASE DES IDENTITES, ET PROCEDURES 
CRYPTOGRAPH IQUES ASSOCIEES 

Patent Applicant/Assignee: 

BOARD OF TRUSTEES OF THE LELAND STANFORD JUNIOR UNIVERSITY, 900 Welch 
Road, Suite 350, Palo Alto, CA 94304, US, US (Residence), US 
(Nationality) 
Inventor ( s ) : 

BONEH Dan, Gates 475, Stanford, CA 94305-9045, US, 
FRANKLIN Matthew, 3021 Engineering II, Davis, CA 95616, US, 
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Legal Representative: 

ALBOSZTA Marek (agent), 45 Cabot Ave., Suite 110, Santa Clara, CA 95051 
US, 

Patent and Priority Information (Country, Number, Date) : 

Patent: WO 200317559 A2-A3 20030227 (WO 0317559) 

Application: WO 2002US27155 20020813 (PCT/WO US0227155) 

Priority Application: US 2001311946 20010813 

Designated States: AE AL AM AT AU AZ BA BE BG BR BY CA CH CN CU CZ DE DK EE 
ES FI GB GD GE GH GM HR HU ID XL IN IS JP KE KG KP KR KZ LC LK LR LS LT 
LU LV MD MG MK MN MW MX NO NZ PL PT RO RU SD SE SG SI SK SL TJ TM TR TT 
TZ UA UG UZ VN YU ZA ZW 

(EP) At BE BG CH CY CZ DE DK EE ES FI FR GB GR IE IT LU MC NL PT SE SK TR 

(OA) BF BJ CF CG CI CM GA GN GQ GW ML MR NE SN TD TG 

(AP) GH GM KE LS MW MZ SD SL SZ TZ UG ZM ZW 

(EA) AM AZ BY KG KZ MD RU TJ TM 
Main International Patent Class: H04L-009/00 
Publication Language: English 
Filing Language: English 
Fulltext Availability: 
Detailed Description 
Claims 

Fulltext Word Count: 24265 
English Abstract 

A method and system for encrypting a first piece of information M to be 
sent by a sender (100) to a receiver (110) allows both sender and 
receiver to compute a secret message key using identity-based information 
and a bilinear map. In a one embodiment, the sender (100) computes an 
identity-based encryption key from an identifier ID associated with the 
receiver (110). The identifier ID may include various types of 
information such as the receiver's e-mail address, a receiver credential, 
a message identifier, or a date. The sender uses a bilinear map and the 
encryption key to compute a secret message key g"sup"r "sub"ID, which is 
then used to encrypt a message M, producing ciphertext V to be sent from 
the sender *(100) to the receiver (110) together with an element rP. An 
identity-based decryption key d "sub"ID. is computed by a private key 
generator (120) based on the ID associated with the receiver and a secret 
•master key s. After obtaining the private decryption key from the key 
generator (120), the receiver (110) uses it together with the element rP 
and the bilinear map to compute the secret message key g"sup"r "sub"ID, 
which is then used to decrypt V and recover the original message M. 
According to one embodiment, the bilinear map is based on a Weil pairing 
or a Tate pairing defined on a subgroup of an elliptic curve. Also 
described are several applications of the techniques, including key 
revocation, credential management, and return receipt notification. 

French Abstract 

La presente invention concerne un precede et un systeme de cryptage 
portant sur une premiere information (M) qu'un emetteur (100) envoie a un 
recepteur (110), et qui permet a 1' emetteur comme au recepteur de 
calculer une cle de cryptage de message par utilisation d'une information 
a base d'identites et de correspondances bilineaires. Selon un mode de 
realisation, 1 ' emetteur (100) utilise un identif icateur associe au 
recepteur (110) pour calculer une cle de cryptage a base d'identite. Cet 
identif icateur peut comporter divers types d ' informations (adresse de 
courrier electronique du recepteur, certificat de recepteur, 
identif icateur de message, date). L'emetteur utilise alors des 
correspondances bilineaires pour calculer une cle de cryptage de message 
(g"sup"r "sub"ID) , utilisee pour crypter un message (M) , ce qui donne un 
texte crypte (V) pouvant etre envoye de l'emetteur (100) au recepteur 
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(110) accompagne d'un element (rP) . Un generateur de cle privee (120) 

i;r?/i°" H^^??'!'' """^ ""^^ decryptage a base d'identite (d"sub"ID) 
sur la base de 1 • xdentif icateur associe au recepteur, et une cle de 
llll ntoT^^''^^^^- fP^^^ f mention de la cle privee du generateur de 
cles (120), le recepteur 1' utilise accompagnee de 1' element (rP) et des 

^g-s^r-Jub-IO^'c^jf^r crypta"ge^d:'m:ssag: 
crvn?! ^v^ ^ derniere sert alors au decryptage du texte 

crypte (V) et pour recuperer le message original (M) . Selon un mode de 
realisation, les correspondances bilineaires se font selon une logique 
d associations de Weil ou de Tate definies sur la base d'un sous-groupe 
d une courbe elliptique. L' invention concerne egalement plusieurs 
applications du precede, et notamment la revocation des cles, la gestion 
des certificats, la notification en retour des accuses de reception. 

Legal Status (Type, Date, Text) 

Publication 20030227 A2 Without international search report and to be 

republished upon receipt of that report 

Examination 20030530 Request for preliminary examination prior to end of 

19th month from priority date 

search Rpt 20030710 Late publication of international search report 

Republication 20030710 A3 With international search report. 



7/5/15 (Item 3 from file: 349) 

DIALOG (R) File 349:PCT FULLTEXT 

(c) 2003 WIPO/Univentio. All rts. reserv. 

00903605 **Image available** 
SECURE AUTHENTICATION OF USERS VIA INTERMEDIATE PARTIES 

AUTHENTIFICATION SECURISEE D » UTILISATEURS VIA DES PARTIES INTERMEDIA IRES 

Patent Applicant/Assignee: 

FUSIONONE INC, Suite 800, 55 Almaden Boulevard, San Jose, OA 95113, US 
US (Residence), US (Nationality) 
Inventor (s) : 

BERSON Thomas A, 764 Forest Avenue, Palo Alto, CA 94301, US, 

RUDY Stephen H, 1631 Cowper Street, Palo Alto, CA 94301,' Us' 
Legal Representative: 

HARMON William J III (agent), Vierra Magen Marcus Harmon & DeNiro LLP, 
685 Market Street, Suite 540, San Francisco, CA 94105-4206, US, 
Patent and Priority Information (Country, Number, Date) : 

P^t^^t: WO 200237749 Al 20020510 (WO 0237749) 

Application: wo 2001US46094 20011102 (PCT/WO US0146094) 

Priority Application: US 2000245949 20001103 
Designated States: JP 

(EP) AT BE CH CY DE DK ES FI FR GB GR IE IT LU MC NL PT SE TR 
Main International Patent Class: H04L-009/32 
Publication Language: English 
Filing Language: English 
Fulltext Availability: 

Detailed Description 

Claims 

Fulltext Word Count: 8414 
English Abstract 

An intermediate system provides remote clients with access to a primary 
system, such as a server. The intermediate system creates and store a 
log-m record (100) for each client. The log-in record contains an 
encrypted primary system client identifier (PSCI). The PSCI contains 
authentication information for verifying a client's right to access the 
primary system. Storing an encrypted version of the PSCI enhances the 
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security of the authentication information on the intermediate system. In 
some implementations of the present invention, the PSCI itself is an 
encrypted value. When a client attempts to log into the primary system, 
the intermediate system initially verifies the client »s intermediate 
system access rights (104) . The intermediate system makes this 
determination using the log-in record and data provided by the client 
(102). Next, the intermediate system sends the PSCI to the client's 
primary system for further authentication (106) . The primary system uses 
the PSCI to verify the client's right to access primary system data 
(108) . 

French Abstract 

L* invention concerne un systeme intermediaire qui fournit a des clients 
eloignes un acces a un systeme primaire, tel qu'un serveur. Le systeme 
intermediaire cree et stocke un enregistrement d'ouverture de session 
(100) pour chaque client. Get enregistrement d'ouverture de session 
contient un identif icateur chiffre de client du systeme primaire (PSCI) . 
Ce PSCI contient des informations d ' authentif ication destinees a verifier 
le droit d'un client a acceder au systeme primaire. Le stockage d'une 
version chiffree du PSCI permet d'ameliorer la securite des informations 
d' authentif ication sur le systeme intermediaire. Dans quelques mises en 
oeuvre de la presente invention, le PSCI est lui-meme une valeur 
chiffree. Lorsqu'un client essaie d'ouvrir une session dans le systeme 
primaire, le systeme intermediaire verifie initialement les droits 
d* acces du client au systeme intermediaire (104) . Le systeme 
intermediaire effectue cette determination au moyen de 1 ' enregistrement 
d'ouverture de session et des donnees fournies par le client (102) . Par 
la suite, le systeme intermediaire envoie le PSCI au systeme primaire du 
client pour une authentif ication supplementaire (106) . Le systeme 
primaire utilise le PSCI pour verifier le droit du client a acceder aux 
donnees du systeme primaire (108) . 
Legal Status (Type, Date, Text) 

Publication 20020510 Al With international search report. 

Publication 20020510 Al Before the expiration of the time limit for 

amending the claims and to be republished in the 
event of the receipt of amendments. 
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(c) 2003 WIPO/Univentio. All rts. reserv. 

00789714 **Image available** 
SENSOR WITH DIGITAL SIGNATURE OF DATA RELATING TO SENSOR 
DETECTEUR A SIGNATURE NUMERIQUE DE DONNEES RELATIVES AU DETECTEUR 

Patent Applicant/Assignee: 

MALLINCKRODT INC, 675 McDonnell Boulevard, Hazelwood, MO 63042, US, US 

(Residence), US (Nationality), (For all designated states except: US) 
FEIN Marcia, 1613 Hollingsworth Drive, Mountain View, CA 94040, US, US 

(Residence), — (Nationality), (Designated only for: US) 
Inventor (s ) : 

FEIN Michael E (deceased), 
Patent Applicant/Inventor: 

BERSON Thomas A, 764 Forest Avenue, Palo Alto, CA 94301, US, US 

(Residence), US (Nationality), (Designated only for: US) 
OLSON Bryan, 400 E. Remington Drive #F-155, Sunnyvale, CA 94087, US, US 

(Residence), US (Nationality), (Designated only for: US) 
MANNHEIMER Paul D, 4119 Sugar Maple Drive, Danville, CA 94506, US, US 

(Residence), US (Nationality), (Designated only for: US) 
PORGES Charles E, 61 Mira Loma, Orinda, CA 94563, US, US (Residence), US 
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(Nationality), (Designated only for: US) 
SCHLOEMER David, 16301 Dearborn Drive, Stilwell, KS 66085, US, US 
(Residence), US (Nationality), (Designated only for: US) 

Legal Representative: 

HAUGHEY Paul C (et al) (agent), Townsend and Townsend and Crew LLP, 8th 
Floor, Two Embarcadero Center, San Francisco, CA 94111, US, 

Patent and Priority Information (Country, Number, Date) : 

Patent: WO 200122873 Al 20010405 (WO 0122873) 

Application: WO 2000US27017 20000928 (PCT/WO US0027017) 

Priority Application: US 99156488 19990928; US 2000662246 20000914 

Designated States: AE AG AL AM AT AU AZ BA BB BG BR BY BZ CA CH CN CR CU CZ 
DE DK DM DZ EE ES FX GB GD GE GH GM HR HU ID IL IN IS JP KE KG KP KR KZ 
LC LK LR LS LT LU LV MA MD MG MK MN MW MX MZ NO NZ PL PT RO RU SD SE SG 
SI SK SL TJ TM TR TT TZ UA UG US UZ VN YU ZA ZW 
(EP) AT BE CH CY DE DK ES FI FR GB GR IE IT LU MC NL PT SE 
(OA) BF BJ CF CG CI CM GA GN GW ML MR NE SN TD TG 
(AP) GH GM KE LS MW MZ SD SL SZ TZ UG ZW 
(EA) AM AZ BY KG KZ MD RU TJ TM 

Main International Patent Class: A61B-005/00 

International Patent Class: G06F-001/00 

Publication Language: English 

Filing Language: English 

English Abstract 

A sensor has codes useful for a monitor which can be authenticated as 
accurate. The sensor produces a signal corresponding to a measured 
physiological characteristic and provides codes which can be assured of 
being accurate and authentic when used by a monitor. A memory associated 
with the sensor stores both data relating to the sensor and a digital 
signature. The digital signature authenticates the quality of the code by 
ensuring it was generated by an entity having predetermined quality 
controls, and ensures the code is accurate. 



French ;\bstract 

Un detecteur comprend des codes utiles a un moniteur, lesquels peuvent 
etre authentifies comme etant precis. Le detecteur produit un signal 
correspondant a une caracteristique physiologique mesuree et il fournit 
des codes pouvant etre assures d'etre precis et authentiques lorsqu'ils 
sont utilises par un moniteur. Une memoire associee au detecteur stocke a 
la fois les donnees relatives au detecteur ainsi qu ' une signature 
numerique. La signature numerique authentifie la qualite du code en 
assurant qu'il a ete produit par une entite ayant des controles de 
qualite predetermines, et assure que le code est exact. 



Legal Status (Type, Date, Text) 

Publication 20010405 Al With international search report. 

Publication 20010405 Al Before the expiration of the time limit for 

amending the claims and to be republished in the 
event of the receipt of amendments. 

Correction 20010614 Corrections of entry in Section 1: under (30) 

replace "Not furnished" by "09/662,246" 

Republication 20010614 Al With international search report. 

Correction 20010614 Corrections of entry in Section 1: 

Examination 20010712 Request for preliminary examination prior to end of 

19th month from priority date 
Correction 20020926 Corrected version of Pamphlet: page 13, claims, 

replaced by a new page 13; after rectification of 

obvious errors as authorized by the International 

Searching Authority 
Republication 20020926 Al With international search report. 
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(Item 5 from file: 349) 

DIALOG (R) File 349:PCT FULLTEXT 
(c) 2003 WIPO/Univentio. All rts . reserv. 

00437224 **Image available** 
METHOD AND APPARATUS FOR SIMULTANEOUS ELECTRONIC EXCHANGE USING A 

SEMI -TRUSTED THIRD PARTY 
PROCEDE ET DISPOSITIF CORRESPONDANT POUR ECHANGE ELECTRONIQUE SIMULTANE 
FAISANT INTERVENIR UNE TIERCE PERSONNE DE NIVEAU DE CONFIANCE MITIGE 
Patent Applicant/Assignee: 

AT & T CORP, 
Inventor ( s ) : 

FRANKLIN Matthew Keith, 
REITER Michael Kendrick, 
Patent and Priority Information (Country, Number, Date) : 
Patent: WO 9827688 A2 19980625 

Application: WO 97US23220 19971211 (PCT/WO US9723220) 

Priority Application: US 96768380 19961217 
Designated States: CA JP MX AT BE CH DE DK ES FI FR GB GR IE IT LU MC NL PT 
SE 

Main International Patent Class: G07F-019/00 
International Patent Class: H04L-09:32 
Publication Language: English 
Fulltext Availability: 

Detailed Description 

Claims 

Fulltext Word Count: 9294 
English Abstract 

A method and apparatus for fairly exchanging documents. A first document 
is shared between principal Y and third party Z. A second document is 
shared between principal X and third party Z. Z verifies that the sharing 
of the first and second documents has been performed correctly v;ith;.uL Z 
understanding either document. If verified, Z sends its shares of the 
first and second documents to Y and X, respectively. X and Y verify that 
Z*s shares are authentic. 

French Abstract 

L' invention a trait a un precede et au dispositif correspondant 
permettant d'effectuer dans les regies un echange de documents. Un 
premier document est partage entre Y, partie principale, et une tierce 
personne: Z. Un second document est partage entre X, partie principale, 
et la tierce personne: Z. Z verifie que le partage des deux documents a 
ete correctement effectue et ce, sans en avoir quelque intelligence. Le 
cas echeant, Z envoie ses propres parties du premier et du second 
document a Y et X, respectivement , qui en verifient 1 ' authenticite . 



7/5/18 (Item 6 from file: 349) 

DIALOG (R) File 349:PCT FULLTEXT 
(c) 2003 WIPO/Univentio. All rts. reserv. 

00436107 **Image available** 
METHOD AND APPARATUS FOR SECURE AND AUDITABLE METERING OVER A 

COMMUNICATIONS NETWORK 
PROCEDE ET APPAREIL DE TAXATION SURE ET VERIFIABLE POUR RESEAUX DE 
COMMUNICATIONS 
Patent Applicant/Assignee: 
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AT & T CORP, 
Inventor (s) : 

FRANKLIN Matthew Keith, 
MALKHI Dahlia, 

Patent and Priority Information (Country, Number, Date) : 
Patent: WO 9826571 A2 19980618 

Application: WO 97US22444 19971210 (PCT/WO US9722444J 

Priority Application: US 96762024 19961211 
Designated States: CA JP MX AT BE CH DE DK ES FI FR GB GR IE IT LU MC NL PT 
SE 

Main International Patent Class: G06F-011/34 
Publication Language: English 
Fulltext Availability: 

Detailed Description 

Claims 

Fulltext. Word Count: 7454 
English Abstract 

A compact metering scheme meters visits to a web site. A proxy module 
intercepts traffic between a client and a server. The proxy module 
appends a metering module to the body of information sent from the server 
to the client. The metering module measures the duration of each visit 
using a timing function F and a unique seed generated for each visit. The 
metering module returns an auditable result when the client ends the 
visit. A log keeper module is used to store each result. 

French Abstract 

Cette invention se rapporte a un programme de taxation compact qui 
permet de comptabiliser les visites effectuees sur un site Web. A cet 
effet, un module mandataire intercepte le trafic entre un client et un 
serveur. Ce module mandataire annexe un module de taxation au bloc des 
informations envoyees par le serveur au client. Ce module de taxation 
calcule la duree de chaque visite en utilisant une fonction de 
chronometrage F et une graine unique generee pour chaque visite. Le 
module de taxation renvoie un resultat verifiable lorsque le client met 
un terme a sa visite. Un module de sauvegarde de releve est utilise pour 
consigner chaque resultat. 



7/5/19 (Item 1 from file: 350) 

DIALOG (R) File 350:Derwent WPIX 

(c) 2003 Thomson Derwent. All rts . reserv. 

015769837 **Image available** 

WPI Acc No: 2003-832039/200377 

XRPX Acc No: N03-664994 
Network access provision method involves authenticating non-registered 
user to selected contents using public key and digital signature signed 
using registered user*s private key expressed as signed cryptographic 
digest 

Patent Assignee: XEROX CORP (XERO ) 
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Number of Countries: 032 Number of Patents: 002 
Patent Family: 
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Patent No Kind Lan Pg Main IPC Filing Notes 
US 20030196087 Al 15 H04L-009/00 
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Designated States (Regional) : AL AT BE BG CH CY CZ DE DK EE ES FX FR GB 

GR HU IE IT LI LT LU LV MC MK NL PT RO SE SI SK TR 

Abstract- (Basic) : US 20030196087 Al 

NOVELTY - A non-registered user is enabled to access selected 
contents identified by a token identifier, only after authentication. 
The non-registered user is authenticated using public key and a digital 
signature signed using registered user*s private key expressed as 
signed cryptographic digest of non-registered user's public key. 

DETAILED DESCRIPTION - INDEPENDENT CLAIMS are also included for the 
following: 

(1) article of manufacture for providing access to network; and 

(2) document server. 

USE - For providing secure access to documents or services of 
private network such as intranet. 

ADVANTAGE - By authenticating non-registered user using digital 
signature signed using private key of registered user, dynamic access 
to information by a non-registered user is ensured. 

DESCRIPTION OF DRAWING{S) - The figure shows a schematic view of 
the network . 

internet (104) 

user device (106,108) 

gate way (110) 

fire wall (112) 

private network (114) 

pp; 15 DwgNo 1/5 
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Network, communication securing method, involves authenticating 
communication from device by using pre-authentication information secured 
by another device 

Patent Assignee: XEROX CORP (XERO ) 
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us 20030149874 Al 20 H04L-009/00 
EP 1335563 A2 E H04L-029/06 
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JP 2003309558 A 12 H04L-009/32 

Abstract (Basic) : US 20030149874 Al 

NOVELTY - The method involves transmitting pre-authentication 
information from a device to another over a location-limited channel . 
The pre-authentication information secured by the later device is used 
to authenticate the communication from the former device. 

USE - Used for securing communication over network medium between 
two devices. 

ADVANTAGE - The pre-authentication of the wireless devices 
eliminates the cave droppers of the medium, thereby allowing the user 
to exchange desired data between the devices. 

DESCRIPTION OF DRAWING (S) - The drawing shows a communication 
authenticating system for a group of devices, 
pp; 20 DwgNo 9/11 
Title Terms: NETWORK; COMMUNICATE; SECURE; METHOD; AUTHENTICITY; 

COMMUNICATE; DEVICE; PRE; AUTHENTICITY; INFORMATION; SECURE; DEVICE 
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Nested loader apparatus for cryptographic system, has base module which 
is programmed to verify presence of unique property of filler module and 
to dynamically load filler module into slot, only when unique property is 
correctly verified 

Patent Assignee: NOVELL INC (NOVE-N) 

Inventor: BERSON T A; KINGDON K W; SCHELL R R 

Number of Countries: 001 Number of Patents: 001 

Patent Family: 
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US 99274532 A 19990323 
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Patent Details: 
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US 6532451 Bl 24 H04L-009/00 Provisional application US 9879133 

Abstract- (Basic) : US 6532451 Bl 

NOVELTY - The apparatus (10) includes a base module provided with 
slots (302,332,336) adapted to receive the filler modules. The filler 
module contains an unique property which is alterable by an authorized 
creator of the module. The base module is programmed to verify the 
presence of unique property of filler module, and to dynamically load 
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the filler module into the slot, only if the unique property is 
correctly verified. 

DETAILED DESCRIPTION - INDEPENDENT CLAIMS are also included for the 
following : 

(1) memory device; and 

(2) integration limitation method of software modules. 

USE - Nested loader apparatus for cryptographic system used for 
military communication. 

ADVANTAGE - The individual and distinct modular cryptography 
modules are hosted by a single base application operating on a 
computer. The base module recognizes and operates only those modules 
having valid signatures corresponding to software development kit of 
known authorized agents or distributors and in accordance with 
authorized policies. 

DESCRIPTION OF DRAWING (S) - The figures show schematic block 
diagrams of slot arrangement. 

nested loader apparatus (10) 
slots (302,332,336) 
pp; 24 DwgNo 7, 8/8 
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Abstract (Basic) : US 20030061483 Al 

NOVELTY - A filler module with cryptographic information 
identifying an unique property is dynamically loaded into an operating 
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system, after verification of the unique property by a loader. The 
loader of the filler module is processed to dynamically load another 
filler module after verifying its unique property using the processed 
loader . 

DETAILED DESCRIPTION - An INDEPENDENT CLAIM is also included for 
data structure for dynamically integrating software modules. 

USE - For limiting integration of software module in cryptographic 
system. 

ADVANTAGE - Enables hosting multiple dynamically linked 
cryptographic modules by a single base application, thereby the modules 
are separately accessed, authorized and used 

DESCRIPTION OF DRAWING (S) - The figure shows a block diagram 
showing arrangement of modules in the data structure to limit software 
module integration. 

pp; 24 DwgNo 1/8 
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Facilitating method for personal attention for an individual via wireless 
networks automatically responding to detection of an individual by 
transmitting information regarding that individual over wireless link to 
portable display 

Patent Assignee: ASARIA N (ASAR-I); FRANKLIN M (FRAN-I); JAMES M (JAME-I); 

KRAMER. R (KRAM-I); KREMER K (KREM-I); MOORES J (MOOR-I); VISURI P 
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US 20030043042 Al G08B-023/00 CIP of application US 2001938356 

CIP of application US 2001955535 
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Abstract (Basic) : WO 200319344 Al 

NOVELTY - The method involves detecting the presence of an 
individual by reading an encoded tag associated with the individual. 
The detection of the individual provokes an automatic response of 
transmitting information regarding that individual over a wireless link 
to a portable display device. A selected portion of the information is 
displayed on a display portion of the display device. The encoded tag 
comprises a radio frequency identification (RFID) tag. 

DETAILED DESCRIPTION - INDEPENDENT CLAIMS are also included for the 
following : 

(a) a system. 

USE - For identification of individuals. 

ADVANTAGE - Efficient and reliable system for identifying and 
gathering information about an individual e.g. in an emergency. 
DESCRIPTION OF DRAWING(S) - The figure shows the system, 
pp; 56 DwgNo 1/23 
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US 20030081785 Al H04L-009/00 Provisional application US 2001311946 

Abstract (Basic) : WO 200317559 A2 

NOVELTY - Encrypting a piece of information M to be sent by a 
sender (100) to a receiver (110) allows both sender and receiver to 
compute a secret message key using identity-based information and a 
bilinear map. The identifier ID may include various types of 
information such as the receiver's e-mail address, a receiver 
credential, a message identifier, or a date. The sender uses a bilinear 
map and the encryption key to compute a secret message key, which is 
then used to encrypt a message M, producing ciphertext V to be sent 
from the sender (100) to the receiver (110) together with an element. 

DETAILED DESCRIPTION - An identity-based decryption key is computed 
by a private key generator (120) based on the ID associated with the 
receiver and a secret master key. After obtaining the private 
decryption key from the key generator (120), the receiver (110) uses it 
together with the element and the bilinear map to compute the secret 
message key, which is then used to decrypt V and recover the original 
message M. INDEPENDENT CLAIM included for the following : method to 
generate a decryption key; , method for encrypting; computer readable 
storage medium; method for providing system parameters; method of 
communicating; electronic message 

USE - For crytographic systems. 

ADV7\NTAGE - Provides an improved cryptographic method. 
DESCRIPTION OF DRAWING (S) - The diagram shows a cryptosystem, 
showing steps taken by a sender, a receiver, and a private key 
generator (PKG), and information communicated between them 
sender (100) 
receiver (110) 
pp; 78 DwgNo 1/12 
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Abstract (Basic) : US 6459725 Bl 

NOVELTY - The versions (553,555) of a wire signal, are received by 
receiver system (552,554), respectively. A switch (556) switches 
between the versions of the wireless signal and provides a non-summed 
composite version (557) of the wireless signal that includes 
multiplexed portions of the versions (553,555), to a transmitter system 
(558) . 

DETAILED DESCRIPTION - INDEPENDENT CLAIMS are included for the 
following : 

(1) Wireless communication system; and 

(2) Repeater system. 

USE - For CDMA-based mobile communication system. 

ADVANTAGE - By transmitting a non-summed composite version of the 
wireless signal, diversity between the repeater and the base station is 
improved and hence reliability of the system is increased. Also, due to 
improved diversity, fading is minimized, signal power requirements are 
reduced, three-decibel SNR loss is reduced, thereby reducing cost of 
user communication devices while increasing operational battery life. 

DESCRIPTION OF DRAWING (S) - The figure shows a block diagram of 
communication system. 

Receiver systems (552,554) 

Versions of wire signal (553,555) 

Switch (556) 

Non-summed composite version (557) 
Transmitter system (558) 
pp; 15 DwgNo 5/10 
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Abstract (Basic) : WO 200260111 A2 

NOVELTY - Involves storing in a memory several addresses 
corresponding to several guest room control devices. Each guest room 
control device includes a centralized electronic locking system 
component, a guest room energy management system component, a direct 
digital control system component and a mini-bar monitoring device. The 
address of a guest room control device is selected from the number of 
addresses . Control data is encapsulated in a packet and sent to the 
guest room control device through a network. 

USE - To provide guest room services e.g. door locks, mini-bar 
monitoring, etc. and guest room control in a building e.g. for power 
saving . 

ADVANTAGE - Enables hotels to cheaply administer power management 
in guest rooms. 

DESCRIPTION OF DRAWING (S) - The drawing shows a schematic diagram 
of the system in which the routing method is employed, 
pp; 30 DwgNo 1/5 
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NOVELTY - The system includes a local area network. Several guest 
room networks are coupled to the local area network. Each guest room 
network is associated with a guest room in the building. Each guest 
room network includes a room hub coupled to the local area network and 
a guest room control device coupled to the room hub. 

DETAILED DESCRIPTION - A guest room service device coupled to the 
room hub is a computer, a voice over Internet Protocol phone, an 
Internet Protocol radio or a television signal converter. Data between 
the local area network and the room hub is communicated in packets 
configured according to a first communications protocol. 

USE - For environment control of guest rooms in hotel e.g. of 
heating . 

ADVANTAGE - Allows energy to be conserved in guest room leading to 
more economical running costs. 

DESCRIPTION OF DRAWING(S) - The figure shows a centralized guest 
room control system. 

pp; 36 DwgNo 1/5 
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International Patent Class (Main) : G06F-015/173 
File Segment: EPI 



7/5/28 (Item 10 from file: 350) 

DIALOG (R) File 350: Derwent WPIX 

(c) 2003 Thomson Derwent. All rts . reserv. 

014700916 **Image available** 

WPI Acc No: 2002-521620/200256 

XRPX Acc No: N02-412761 
Document forgery protection printing method involves printing fragile or 
robust watermarks corresponding to protection level determined based on 
determined forgery protection requirement 

Patent Assignee: XEROX CORP (XERO ) 

Inventor: BELL A G; BERSON T A; BREUEL T M; CASS T; CURRY D N; FRAInJKLIN M K 

; GREENE D H; HECHT D L; KRIVACIC R T; LUNT T F; R DREWS D; STEFIK M J 
Number of Countries: 027 Number of Patents: 002 
Patent Family: 

Patent No Kind Date Applicat No Kind Date Week 

EP 1209897 A2 20020529 EP 2001309647 A 20011115 200256 B 

JP 2002190947 A 20020705 JP 2001290056 A 20010921 200259 

Priority Applications (No Type Date): US 2000722508 A 20001128; US 

2000722362 A 20001128 
Patent Details: 

Patent No Kind Lan Pg Main IPC Filing Notes 
EP 1209897 A2 E 22 H04N-001/32 

Designated States (Regional) : AL AT BE CH CY DE DK ES FI FR GB GR IE IT 

LI LT LU LV MC MK NL PT RO SE SI TR 
JP 2002190947 A 14 H04N-001/387 

Abstract (Basic) : EP 1209897 A2 

NOVELTY - A protection level (130) to be applied to a document 
(140) is determined based on forgery protection requirements determined 
by processing the document's image. Fragile or robust watermarks 
corresponding to the determined protection level are printed on the 
document using a selected printer. 

DETAILED DESCRIPTION - An INDEPENDENT CLAIM is included for 
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document forgery protection printing system. 

USE - For protecting document against forgery. 

ADVANTAGE - The fragile or robust watermark identify the custodian 
of the original document, the restrictions on further copying that 
apply to the custodian and to the original document, and other 
information that serves to more uniquely identify the original 
document, thereby detecting forgery accurately. 

DESCRIPTION OF DRAWING (S) - The figure shows a schematic view of a 
print management system. 

Protection level (130) 

Document (140) 

pp; 22 DwgNo 1/11 

Title Terms: DOCUMENT; FORGE; PROTECT; PRINT; METHOD; PRINT; FRAGILE; 

ROBUST; WATERMARK; CORRESPOND; PROTECT; LEVEL; DETERMINE; BASED; 

DETERMINE; FORGE; PROTECT; REQUIRE 
Derwent Class: P75; TOl; W02 

International Patent Class (Main) : H04N-001/32; H04N-001/387 
International Patent Class (Additional) : B41J-005/30; B41J-029/00; 

B41J-029/38; G06F-003/12; G06T-001/00; H04N-001/40 
File Segment: EPI; EngPI 



7/5/29 (Item 11 from file: 350) 

DIALOG (R) File 350: Derwent WPIX 

(c) 2003 Thomson Derwent. All rts. reserv. 

014615056 **Image available** 

WPI Acc No: 2002-435760/200246 

Related WPI Acc No: 2002-444392 

XRPX Acc No: N02-343010 
Secure authentication of users via intermediate parties in computer 
conmiuni cations to provide remote clients with access to server by 
creating log in records for clients 

Patent Assignee: BERSON T A (BERS-I); RUDY S M (RUDY-I); FUSIONONE INC 
(FUSI-N) 

Inventor: BERSON T A; RUDY S M 

Number of Countries: 021 Number of Patents: 002 
Patent Family : 

Patent No Kind Date Applicat No Kind Date Week 

WO 200237749 Al 20020510 WO 2001US46094 A 20011102 200246 B 
US 20020087866 Al 20020704 US 2000245949 P 20001103 200247 

US 20013693 A 20011102 

Priority Applications (No Type Date) : US 2000245949 P 20001103; US 20013693 

A 20011102 
Patent Details: 

Patent No Kind Lan Pg Main IPC Filing Notes 
WO. 200237749 Al E 44 H04L-009/32 
Designated States (National) : JP 

Designated States (Regional) : AT BE CH CY DE DK ES FI FR GB GR IE IT LU 
MC NL PT SE TR 

US 20020087866 Al H04K-001/00 Provisional application US 2000245949 

Abstract (Basic) : WO 200237749 Al 

NOVELTY - An intermediate system creates log in records for each 
client, receives log in data from a client and determines if the client 
should be authenticated for access to the intermediate system. It sends 
primary system authentication data to the identified primary system and 
the primary system determines whether to authenticate the client. If 
authentication is successful, an acknowledgment is sent to the 
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intermediate system and the application is performed. 

DETAILED DESCRIPTION - INDEPENDENT CLAIMS are included for the 
following; 

(1) for a processor readable storage medium; 

(2) for access providing apparatus. 
USE - Securing computer communications. 

ADVANTAGE - Reduced resources expended in uploading and storing 
primary system data. 

DESCRIPTION OF DRAWING (S) - The drawing is a flow chart of the 
process . 

pp; 44 DwgNo 2/9 

Title Terms: SECURE; AUTHENTICITY; USER; INTERMEDIATE; PARTY; COMPUTER; 

COMMUNICATE; REMOTE; CLIENT; ACCESS; SERVE; LOG; RECORD; CLIENT 
Derwent Class: TOl; WOl 

International Patent Class (Main) : H04K-001/00; H04L-009/32 
File Segment: EPI 



7/5/30 (Item 12 from file: 350) 

DIALOG (R) File 350: Derwent WPIX 
(c) 2003 Thomson Derwent. All rts. reserv. 

014367191 **Image available** 

WPI Acc No: 2002-187893/200224 

XRPX Acc No: N02-142459 
Real estate investment instrument creation method involves reaggregating 
multiple tenant-in-common deeds after specified interval, by using 
multiple deedshares that are created from real estate portfolio 

Patent Assignee: AMERICAN MASTER LEASE LLC (AMMA-N) 

Inventor: ANDREWS J; FRANKLIN M; ROBERTS N; RUNNELS C 

Number of Countries: 001 Number of Patents: 001 

Patent Family: 

Patent No Kind Date Applicat No Kind Date Week 

US 20020013750 Al 20020131 US 98205633 A 19981203 200224 B 

US 2001956372 A 20010917 

Priority Applications (No Type Date) : US 98205633 A 19981203; US 2001956372 

A 20010917 
Patent Details : 

Patent No Kind Lan Pg Main IPC Filing Notes 

US 20020013750 Al 14 G06F-017/60 Cont of application US 98205633 

Cent of patent US 6292788 

Abstract (Basic) : US 20020013750 Al 

NOVELTY - A real property is aggregated to form a real estate 
portfolio. The property in the portfolio is encumbered with a master 
agreement. Multiple deedshares are created by dividing the title in the 
portfolio into multiple tenant-in-common deeds of predetermined 
denomination. The tenant-in-common deeds are reaggregated after a 
specified interval, by using the created deedshares. 

DETAILED DESCRIPTION - An INDEPENDENT CLAIM is also included for 
tax-deferred real estate investment exchanging method. 

USE - For creating real estate investment instrument for 
transaction of tax-deferred real estate. 

ADVANTAGE - Provides safety, steady income stream, divisibility, 
ready liquidity and no involvement in management of the property. 

DESCRIPTION OF DRAWING(S) - The figure shows the new real estate 
investment method and instrument. 

pp; 14 DwgNo 2/8 
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PORTFOLIO 
Derwent Class: TOl 

International Patent Class (Main) : G06F-017/60 
File Segment: EPI 



7/5/31 (Item 13 from file: 350) 

DIALOG (R) File 350: Derwent WPIX 
(c) 2003 Thomson Derwent. All rts . reserv. 

014278498 **Image available** 

WPI Acc No: 2002-099199/200214 

XRPX Acc No: N02-073330 
Transition state-based cryptographic method for use in game, military 
applications, involves providing access key to user in response to 
request, only upon presentation of valid state key 

Patent Assignee: XEROX CORP (XERO ) 

Inventor.: BERSON T A; DEAN R D; FRANKLIN M K; LUNT T F; SMETTERS D K 
Number of Countries: 027 Number of Patents: 002 
Patent Family: 

Patent No Kind Date Applicat No Kind Date Week 

EP 1168140 A2 20020102 EP 2001305072 A 20010611 200214 B 

JP 2002077138 A 20020315 JP 2001170639 A 20010606 200222 

Priority Applications (No Type Date) : US 2000596834 A 20000619 
Patent Details: 

Patent No Kind Lan Pg Main IPC Filing Notes 
EP 1168140 A2 E 13 G06F-001/00 

Designated States (Regional): AL AT BE CH CY DE DK ES FI FR GB GR IE IT 

LI LT LU LV MC MK NL PT RO SE SI TR 
JP 2002077138 A 9 H04L-009/16 

Abstract (Basic) : EP 1168140 A2 

NOVELTY - A request including a state key is forwarded from a user 
to a server through LAN, WAN, wireless network or Internet, to obtain 
access to data and/or a subsequent state of the application, when 
reaching a particular state in the application. The validity of the 
state key is analyzed by the server in response to the request, and a 
required access key is provided when the state key is valid. 

DETAILED DESCRIPTION - INDEPENDENT CLAIMS are also included for the 
following : 

(a) Transition state-based cryptographic system; 

(b) Transition state-based cryptographic program recorded on 
computer readable medium 

USE - For workflow applications, military applications, game 
applications such as computer games or simulations, including single 
player or multi player game, to allow progression to subsequent stages 
of workflow, confidential military map and game levels respectively. 

ADVANTAGE - Protects confidentiality of data until some predefined 
condition has occurred, by revealing next portion of data only when 
valid state key is presented. Results in saving of network bandwidth, 
as the need to move large qualities of application data from server to 
application across the network is alleviated. Ensures security of 
transmitted application data, as the data are transmitted as state keys 
or access keys, avoiding interception by other parties. 

DESCRIPTION OF DRAWING(S) - The figure shows a flowchart explaining 
the process of transition state-based cryptography, 

pp; 13 DwgNo 3/7 
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STATE; KEY 
Derwent Class: TOl; WOl 

International Patent Class (Main) : G06F-001/00; H04L-009/16 
International Patent Class (Additional): G06F-012/00; G06F-012/14 
File Segment: EPI 



7/5/32 (Item 14 from file: 350) 

DIALOG (R) File 350: Derwent WPIX 
(c) 2003 Thomson Derwent. All rts. reserv. 

014104832 **Image available** 

WPI Acc No: 2001-589046/200166 

Related WPI Acc No: 2002-187893 

XRPX Acc No: NOl-438692 
Investment process creation method for tax-deferred exchanges in real 
estate business, involves producing tenant-in-common deed shares by 
dividing property capital and recombining deeds based on master agreement 

Patent Assignee: AMERICAN MASTER LEASE LLC (AMMA-N) 

Inventor: ANDREWS J; FRANKLIN M; ROBERTS N; RUNNELS C 

Number of Countries: 001 Number of Patents: 001 

Patent Family: 

Patent No Kind Date Applicat No Kind Date Week 

US 6292788 Bl 20010918 US 98205633 A 19981203 200166 B 

Priority Applications (No Type Date) : US 98205633 A 19981203 
Patent Details: 

Patent No Kind Lan Pg Main IPC Filing Notes 
US 6292788 Bl 15 G06F-017/60 

Abstract (Basic) : US 6292788 Bl 

NOVELTY - The real properties are combined to form a real estate 
portfolio and is encumbered using a master agreement. Capital of the 
property is divided into tenant-in-common deeds of predetermined 
denomination. The deeds are recombined at specific interval, based on 
the procedures described in master agreement. 

DETAILED DESCRIPTION - An INDEPENDENT CLAIM is also included for 
method of performing a tax deferred exchange of investment, 

USE - For performing tax-deferred exchanges in commercial and other 
real estate business. 

ADVANTAGE - Provides safety and steady income stream with ready 
liquidity without involvement in property management. Provides right to 
master tenant for sublease the real estate. 

DESCRIPTION OF DRAWING (S) - The figure shows the structure of new 
real estate investment method and investment rules. 

pp; 15 DwgNo 2/8 
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International Patent Class (Main) : G06F-017/60 
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XRPX Acc No: NOl-409568 
Access control system for authenticating online content referenced in 
hardcopy documents has user responding to an authentication challenge 
from the server using a password mechanism printed in the hardcopy 
document 

Patent Assignee: XEROX CORP (XERO ) 
Inventor: BERSON T A; DEAN R D; GREENE D H 
Number of Countries: 026 Number of Patents: 002 
Patent Family: 

Patent No Kind Date Applicat No Kind Date Week 

EP 1096358 Al 20010502 EP 2000123263 A 20001026 200162 B 

JP 2001167052 A 20010622 JP 2000323407 A 20001024 200162 

Priority Applications (No Type Date) : US 99429539 A 19991028 
Patent Details: 

Patent No Kind Lan Pg Main IPC Filing Notes 
EP 1096358 Al E 28 G06F-001/00 

Designated States (Regional) : AL AT BE CH CY DE DK ES FI FR GB GR IE IT 

LI LT LU LV MC MK NL PT RO SE SI 
JP 2001167052 A 16 G06F-015/00 

Abstract (Basic) : EP 1096358 Al 

NOVELTY - The access control system authenticates online content 
referenced in hardcopy documents has the user responding to an 
authentication challenge from the server using a password mechanism 
printed in the hardcopy document which allows the user to identify a 
password for responding to the request by the server. 

DETAILED DESCRIPTION - Independent claims describe a server for 
providing secure access to online content and a hardcopy document. 

USE - As a system for authenticating online content referenced in 
hardcopy documents. 

ADVANTAGE - After authenticating the user the server initiates a 
state change to enable subsequent access to the online content by the 
user with a different password that is also identified with the 
password mechanism. 

DESCRIPTION OF DRAWING (S) - The drawing shows a detailed view of a 
page of the hardcopy document with a reference to online content and a 
password mechanism for responding to challenges to requests for access 
to the online content. 

the login reference (116) 

the page (115) 

the hardcopy document (112) 
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International Patent Class (Additional) : G06F-003/12 
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XRPX Acc No: NOl-372726 
Data object access right granting method involves creating and forwarding 
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license object cell related with data object cell, to user corr^uter 

Patent Assignee: MEDIADNA INC (MEDI-N) 
Inventor: FRANKLIN M; KNAUFT C 

Number of Countries: 094 Number of Patents: 002 
Patent Family: 

Patent No Kind Date Applicat No Kind Date Week 

WO 200150319 A2 20010712 WO 2000US35103 A 20001222 200155 B 

AU 200125945 A 20010716 AU 200125945 A 20001222 200169 

Priority Applications (No Type Date) : US 99474830 A 19991230 
Patent Details: 

Patent No Kind Lan Pg Main IPC Filing Notes 

WO 200150319 A2 E 88 G06F-017/00 

Designated States (National) : AE AG AL AN AT AU AZ BA BB BG BR BY BZ CA 
CH CN CR CU CZ DE DK DM DZ EE ES FI GB GD GE GH GM HR HU ID IL IN IS JP 
KE KG KP KR KZ LC LK LR LS LT LU LV MA MD MG MK MN MW MX MZ NO NZ PL PT 
RO RU SD SE SG SI SK SL TJ TM TR TT TZ UA UG US UZ VN YU ZA ZW 
Designated States (Regional): AT BE CH CY DE DK EA ES FI FR GB GH GM GR 
IE IT KE LS LU MC MW MZ NL OA PT SD SE SL SZ TR TZ UG ZW 

AU 200125945 A G06F-017/00 Based on patent WO 200150319 

Abstract (Basic) : WO 200150319 A2 

NOVELTY - Data object cell is created and sent to user computer 
(115) over a network. A license object cell related to data object cell 
is created and sent to the computer over the network. Access to data 
object cell is granted based upon information in the related license 
object cell. 

DETAILED DESCRIPTION - INDEPENDENT CLAIMS are also included for the 
following : 

(a) Data object management method; 

(b) Network for providing service to use; 

(c) Data object management system; 

(d) Data object cell; 

(e) License object cell; 

(f) Database containing user data, content data and license data 
USE - For digital rights management (DRM) of on-line customer for 

providing goods and service through internet. 

ADVANTAGE - Provides complete control over a customer's access to 
information, by allowing customer to access content as prescribed by 
terms of content cell and license cell. Since the license management 
system is available for immediate access through communication medium, 
the customer can access the content without much delay. 

DESCRIPTION OF DRAWING{S) - The figure shows the high level block 
diagram of data object access right management method. 

User computer (115) 

pp; 88 DwgNo 1/14 
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013905415 **Image available** 
WPI Acc No: 2001-389628/200141 
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Pulse oximetry sensor for measuring blood flow characteristics, has 
memory in which sensor signal is stored along with digital signature 

Patent Assignee: MALLINCKRODT INC (MLCW ) 

Inventor: BERSON T A; FEIN M E; MANNHEIMER P D; OLSON B; PORGES C E; 
SCHLOEMER D 

Number of Countries: 095 Number of Patents: 008 
Patent Family: 
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Priority Applications (No Type Date) : US 2000662246 A 20000914; US 99156488 

P 19990928 
Patent Details: 

Patent No Kind Lan Pg Main IPC Filing Notes 

WO 200122873 Al E 33 A61B-005/00 

Designated States (National) : AE AG AL AM AT AU AZ BA BB BG BR BY BZ CA 

CH CN CR CU CZ DE DK DM DZ EE ES FI GB GD GE GH GM HR HU ID IL IN IS JP 

KE KG KP KR KZ LC LK LR LS LT LU LV MA MD MG MK MN MW MX MZ NO NZ PL PT 

RO RU SD SE SG SI SK SL TJ TM TR TT TZ UA UG US UZ VN YU ZA ZW 

Designated States (Regional) : AT BE CH CY DE DK EA ES FI FR GB GH GM GR 

IE IT KE LS LU MC MW MZ NL OA PT SD SE SL SZ TZ UG ZW 

AU 200078430 A A61B-005/00 Based on patent WO 200122873 • 

BR 200014345 A A61B-005/00 Based on patent WO 200122873 

EP 1215995 Al E A61B-005/00 Based on patent WO 200122873 

Designated States (Regional) : AL AT BE CH CY DE DK ES FI FR GB GR IE IT 
LI LT LU LV MC MK NL PT RO SE SI 

KR 2002064292 A A61B-005/00 

CN 1407870 A A61B-005/00 

JP 2003524948 W 37 H04L-009/32 Based on patent WO 200122873 

NZ 517977 A A61B-005/00 Based on patent WO 200122873 



Abstract (Basic) : WO 200122873 Al 

NOVELTY - A sensor outputs signal corresponding to the measured 
physiological characteristics. A memory arranged outside monitor, 
stores data relating to the sensor along with digital signature. 

DETAILED DESCRIPTION - INDEPENDENT CLAIMS are also included for the 
following : 

(a) Method of creating digital signature; 

(b) Sensor reader; 

(c) Blood flow characteristic evaluation system; 

(d) Sensor operating method for blood flow evaluation. 

USE - To measure various blood flow characteristics like blood 
oxygen saturation of hemoglobin in arterial blood, blood pulse rate, 
etc . 

ADVANTAGE - Ensures accurate computations and accurate patient 
monitoring, by storing sensing data along with patient identification. 

DESCRIPTION OF DRAWING(S) - The figure shows the block diagram of 
signing mechanism in the measuring system. 
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XRPX Acc No: NOl-191287 
Method for providing privacy and trust in electronic communications uses 
public and private keys and cryptographic techniques to find shared 
preferences in a group without requiring disclosure of those preferences 

Patent Assignee: XEROX CORP (XERO ) 

Inventor: FRANKLIN M K; HOGG T H; HUBERMAN B A 

Number of Countries: 025 Number of Patents: 001 

Patent Family: 

Patent No Kind Date Applicat No Kind Date Week 

EP 1052582 A2 20001115 EP 2000110372 A 20000515 200128 B 

Priority Applications (No Type Date) : US 2000568794 A 20000509; US 99134179 

P 19990513 
Patent Details: 

Patent No Kind Lan Pg Main IPC Filing Notes 
EP 1052582 A2 E 21 G06F-017/60 

Designated States (Regional) : AL AT BE CH CY DE DK ES FI FR GB GR IE IT 
LI LT LU LV MC MK NL PT RO SE SI 
Abstract (Basic) : EP 1052582 A2 

NOVELTY - Cryptographic techniques involving private and public 
keys are used: to find a group with shared preferences without 
requiring individuals to disclose their preferences to others; to allov; 
an individual to negotiate on behalf of a group by proving membership 
of the group without revealing one's identity; and to allow an 
individual to deniably sign a document making recommendations to 
another individual. 

DETAILED DESCRIPTION - INDEPENDENT CLAIMS are included for 

(a) a method for an individual to deniably sign a recommendation 
for another individual 

(b) and a method of discovering a community with a shared interest 
or preference. 

USE - In electronic communications. 

ADVANTAGE - Allows greater trust and certainty by providing 
anonymity for individuals, 
pp; 21 DwgNo 0/5 
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WPI Acc No: 2000-423519/200036 

XRPX Acc No: NOO-315976 
Document text obfuscating method for information retrieval system, 
involves retaining index words by discarding the words from dociiment 
corresponding to words in predefined words set 

Patent Assignee: MEDIADNA INC (MEDI-N) ; INCEPTOR INC (INCE-N) 
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Priority Applications (No Type Date) : US 98111501 P 19981208; US 99456784 A 

19991208 
Patent Details: 

Patent No Kind Lan Pg Main IPC Filing Notes 

WO 200034845 A2 E 42 G06F-000/00 

Designated States (National) : AE AL AM AT AU AZ BA BB BG BR BY CA CH CN 
CR CU CZ DE DK DM EE ES FI GB GD GE GH GM HR HU ID IL IN IS JP KE KG KP 
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US 6654754 Bl G06F-017/30 Provisional application US 98111501 

Abstract (Basic) : WO 200034845 A2 

NOVELTY - The index words are retained by discarding the words from 
the document corresponding to words in predefined words set. The 
document generated after words discarding is transmitted to the 
information retrieval system. The discarded words are replaced by 
different words from predefined words set. The order of non-discarded 
words is reversed. 

DETAILED DESCRIPTION - INDEPENDENT CLAIMS are also included for the 
following : 

(a) document obfuscating system; 

(b) dynamic electronic document generating method 

USE - For generating index information for data objects in 
information retrieval systems. 

ADVANTAGE - Reduces cost of system, used in generation of index data 
for IR system. Avoids need for modification in IR system providers. 
Facilitates usage of DRM-protected data objects in IR systems. Offers 
seamless, transparent and immediate support for search of DRM-protected 
data object. Reduces overhead associated with maintenance of index data 
for IR system. Generates new index data for data object if content of 
data objects is changed. 

DESCRIPTION OF DRAWING(S) - The figure shows data flow diagram 
showing communication between client and server. 

pp; 42 DwgNo 2/17 
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; INDEX; WORD; DISCARDED; WORD; DOCUMENT; CORRESPOND; WORD; PREDEFINED; 
WORD; SET 
Derwent Class: TOl 

International Patent Class (Main) : G06F-000/00; G06F-001/00; G06F-017/30 
File Segment: EPI 
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WPI Acc No: 2000-409871/200035 

XRPX Acc No: NOO-306137 
Transaction executing method for secure auction service network involves 
validating monetary bids by decryption using private keys and evaluating 
consistency with public information 

Patent Assignee: AT & T CORP (AMTT ) 

Inventor: FRANKLIN M K; REITER M K 

Number of Countries: 001 Number of Patents: 001 

Patent Family: 

Patent No Kind Date Applicat No Kind Date Week 

US 6055518 A 20000425 US 9610993 A 19960201 200035 B 

US 96745717 A 19961112 

Priority Applications (No Type Date) : US 9610993 P 19960201; US 96745717 A 

19961112 
Patent Details: 

Patent No Kind Lan Pg Main IPC Filing Notes 

US 6055518 A 19 G06F-019/00 Provisional application US 9610993 

Abstract (Basic) : US 6055518 A 

NOVELTY - A winning bidding terminal is collectively determined 
from several terminals. The bids are encoded using public information 
and private keys for distribution to servers. The encrypted monetary 
bids are distributed in shares among the servers. The servers validate 
the bids by decrypting the bids using private keys and evaluates the 
consistency with the public information. 

DETAILED DESCRIPTION - Monetary bids submitted from the bidding 
terminals are distributed among servers during bidding period. Validity 
of the monetary value of each bid is verified at the servers using a 
distributed protocol. 

USE - For secure auction service network. 

ADVANTAGE - Enables coalition of auction servers to link the same 
coin, and thus the same bidder, to both actions, and does not prevent 
the framing attack. Provides secure and efficient integration of the 
range of old and new cryptographic techniques. 

DESCRIPTION OF DRAWING(S) - The figure shows simplified overview of 
secure option system. 

pp; 19 DwgNo 1/5 
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Controlling con^uter data usage 
Patent Assignee: MACROVISION CORP (MACR-N) ; MEDIADNA INC (MEDI-N) 
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Abstract (Basic) : WO 9936854 Al 

NOVELTY - Method consists in providing a data object including a 
description of the peer data objects, determining whether they are 
authorized to communicate with the peer data objects, and connecting 
the data object to the peer data objects based on authorization being 
granted, so that the objects can communicate with each other. The peer 
data objects define a software application (Internet browser, on-line 
virtual store) and the data object can be encrypted. Digital signatures 
are verified in each peer data object to determine authorization of 
peer' data objects. 

USE - Method is for authenticating peer data objects in component 
object systems such as browser systems. 

ADVANTAGE - Method authenticates identity of a data object to its 
peers each time the data object is used and authenticates the identity 
of the peers to the data object. 

DESCRIPTION OF DRAWING (S) - The drawing shows a high-level block 
diagram with data object providers, data object and animating system 
connecting the data object to peer data objects. 

pp; 27 DwgNo 1/10 
Title Terms: CONTROL; COMPUTER; DATA 
Derwent Class: TOl 

International Patent Class (Main) : G06F-011/00; G06F-015/00; H04L-009/00 
International Patent Class (Additional) : G06F-001/00; G06T-015/70 
File Segment: EPI 



7/5/40 (Item 22 from file: 350) 

DIALOG (R) File 350: Derwent WPIX 
(c) 2003 Thomson Derwent. All rts. reserv. 

011946226 **Image available** 

WPI Acc No: 1998-363136/199831 

XRPX Acc No: N98-283513 
Simultaneous document exchange apparatus for network - has first and 
second sharing mechanisms for sharing first and second documents 
respectively, with third party verification without revelation, and with 
first and second principal verification of document sharing 

Patent Assignee: AT & T CORP (AMTT ) 

Inventor: FRANKLIN M K; REITER M K 

Number of Countries: 021 Number of Patents: 002 

Patent Family: 

Patent No Kind Date Applicat No Kind Date Week 

WO 9827688 A2 19980625 WO 97US23220 A 19971211 199831 B 

US 6263436 Bl 20010717 US 96768380 A 19961217 200142 

Priority Applications (No Type Date) : US 96768380 A 19961217 
Patent Details: 

Patent No Kind Lan Pg Main IPC Filing Notes 
WO 9827688 A2 E 55 H04L-009/32 

Designated States (National) : CA JP MX 

Designated States (Regional) : AT BE CH DE DK ES FI FR GB GR IE IT LU MC 
NL PT SE 

US 6263436 Bl H04L-009/00 

Abstract (Basic) : WO 9827688 A 

The apparatus includes a mechanism for sharing a first document 
between principal Y and third party Z, and a second mechanism for 
sharing a second document between principal X and third party Z. A 
third party verifier confirms from 2 that the sharing of the two 
documents is performed correctly. 
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This is done without revealing the documents to Z. 
If Z verifies the sharing, it sends its shares to Y and X. The 
second principal verifier for Y verifies Z's share of the first 
document, and the first principal verifier for X verifies Z's share of 
the second document. The sharing mechanism uses a 2 out of 2 secret 
sharing scheme. 

USE - For electronic commerce and transactions, and techniques for 
enabling users to engage in fair or simultaneous electronic 
transactions using semi-trusted third party. 

ADVANTAGE - Prevents, during fraudulent behaviour by user, 
disclosure of any electronic information until exchange and 
authentication of information is complete. 

Dwg . 2 A/ 4 

Title Terms: SIMULTANEOUS; DOCUMENT; EXCHANGE; APPARATUS; NETWORK; FIRST; 

SECOND; SHARE; MECHANISM; SHARE; FIRST; SECOND; DOCUMENT; RESPECTIVE; 
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DOCUMENT; SHARE 
Derwent Class: TOl; T05; WOl 

International Patent Class (Main) : H04L-009/00; H04L-009/32 
File Segment: EPI 



7/5/41 (Item 23 from file: 350) 

DIALOG (R) File 350: Derwent WPIX 
(c) 2003 Thomson Derwent. All rts. reserv. 

011931998 **Image available*"^ 

WPI Acc No: 1998-348908/199830 

XRPX Acc No: N98-272303 
Metering apparatus for recording visit to Web sites - has metering 
program and cookie downloaded to client and tracking time of site visit 
that is reported to meter logging seirver 

Patent Assignee: AT & T CORP (AMTT ) 

Inventor: FRANKLIN M K; MALKHI D; FRAKLIN M K 

Number of Countries: 021 Number of Patents: 002 

Patent Family: 

Patent No Kind Date Applicat No Kind Date Week 

WO 9826571 A2 19980618 WO 97US22444 A 19971210 199830 B 

US 6115742 A 20000905 US 96762024 A 19961211 200044 

Priority Applications {No Type Date) : US 96762024 A 19961211 
Patent Details: 

Patent No Kind Lan Pg Main IPC Filing Notes 
WO 9826571 A2 E 39 H04M-015/00 

Designated States (National) : CA JP MX 

Designated States (Regional) : AT BE CH DE DK ES FI FR GB GR IE IT LU MC 
NL PT SE 

US 6115742 A G06F-013/00 

Abstract (Basic) : WO 9826571 A 

The apparatus includes a proxy module that intercepts information 
between a client and a server. When a client attempts to visit a 
monitored site, the visit reaches a monitor server. The server routes 
the request through to the actual site. 

When the server receives the response, it attaches a cookie and a 
metering program to the response. The metering program operates in the 
client machine to record the extent of the visit. When access to the 
site- finishes the data is returned to a logging system. 

ADVANTAGE - Allows frequency and extent of visits to advertising 
sites to be securely and accurately monitored for rating purposes. 
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WPI Acc No: 1998-181401/199817 

XRPX Acc No: N98-143586 
In^lementing and searching content addressable memory for ATM switch - 
concurrently searching for control data by reading 1st and 2nd field from 
header and comparing in parallel 1st field and 1st tag, 2nd field and 2nd 
tag, and 2nd field with predetermined vector 

Patent Assignee: MOTOROLA INC (MOTI ) 

Inventor: FRANKLIN M; JONES K W; LOSCHKE J A; PARKS C M 
Number of Countries: 021 Number of Patents: 004 
Patent Family: 
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JP 10126422 A 14 H04L-012/28 

CA 2213961 A GllC-015/00 
US 5956336 A H04L-012/28 

Abstract (Basic) : EP 833257 A 

The content addressable memory (CAM) contains two first memory 
arrays. The first matches (102) words and the second (103) comprises 
link words. A reference word is provided to the CAM. The first memory 
array is binarily searched to find a match word. The match word is 
equal to the reference word and outputs a link word from the second 
memory array corresponding to the match word. 

Control information is concurrently searched for by reading a first 
and second field from a header and comparing (105) in parallel the 
first field and the first tag, the second field and second tag, and the 
second field with a predetermined vector. 

USE - Digital electronic devices and to devices used to manage 
header information in switching network. 
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Secure encryption of plain text data block into cipher text data block - 
has corr5>atibilitY switch for toggling between compatibility with less 
secure encryption standard and key-based secure encryption 
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Abstract (Basic) : CA 2168717 A 

The method involves converting the plain text data block into an 
intermediate data block according to a first encryption process ivhich 
uses' a first key signal. The state of compatibility switch is 
determined as being in a compatible or secure state. The first 
intermediate block is converted into a second intermediate block using 
a second key signal when the switch is in the secure state, and a 
compatibility value as its key when the switch is in the compatible 
state . 

The second encryption process is an involuntary transformation of 
its data input. The second intermediate data block is converted into 
the cipher text data block according to an encryption process which is 
an inverse transformation of the first encryption process using the 
first key signal. 

USE - For digital cellular telephone with switch for choosing 
compatibility security and higher security. 
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Data processing system - NoAbstract 
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Coin validity checking appts . - has coin-arrival-sensing mode leading to 
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Patent Assignee: MARS INC {MRSC ) 
Inventor: DEAN R; HUTCHINSON D; REYNER P J 
Number of Countries: Oil Number of Patents: 002 
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Abstract (Basic) : EP 304535 A 

Each coin rolls under gravity past two inductive sensors in 
self-excited HF oscillatory circuits (300,301) and a third sensor in a 
circuit oscillating at a lower frequency (pref . about 120 kHz) . In the 
standby condition of the appts., only one HF circuit (300) is energised 
from an external source (304) . 
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The power level in this mode is sufficient for sensing the arrival 
of the coin and producing a signal detectable by a large-scale 
integrated circuit (316) . This responds by generating a power-up signal 
for the other two oscillators (301,302) and processing the three 
signals to ascertain whether the coin is acceptable. 

USE/ADVANTAGE - Pay telephones or other battery operated equipment 
such as cigarette vending machines and parking meters. Identically 
sized coins of different compsn. are distinguishable by appts. working 
at only one frequency and with relatively low average power 
consumption . 
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Coin validator and denomination checker - has inductive circuits 
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Number of Countries: 013 Number of Patents: 010 
Patent Family: 



Patent No 


Kind 


Date 


Applicat No 


Kind 


Date 


Week 


WO 


8502047 


A 


19850509 


WO 


84GB381 


A 


19841105 


198520 


EP 


146251 


A 


19850626 


EP 


84307619 


A 


19841105 


198526 


GB 


2151062 


A 


19850710 


GB 


8427935 


A 


19841105 


198528 


GB 


2151062 


B 


19880629 










198826 


EP 


308996 


A 


19890329 


EP 


88117267 


A 


19841102 


198913 


EP 


308997 


A 


19890329 


EP 


88117268 


A 


19841105 


198913 


EP 


146251 


Bl 


19920812 


EP 


84307619 


A 


19841105 


199233 


DE 


3485866 


G 


19920917 


DE 


3485866 


A 


19841105 


199239 










EP 


84307619 


A 


19841105 




EP 


308997 


Bl 


19930922 


EP 


84307619 


A 


19841105 


199338 










EP 


88117268 


A 


19841105 




DE 


3486213 


G 


19931028 


DE 


3486213 


A 


19841105 


199344 










EP 


88117268 


A 


19841105 





Priority Applications (No Type Date) : GB 845721 A 19840305; GB 8329533 A 
19831104 

Cited Patents: EP 58094; EP 62411; EP 86648; FR 2212589; GB 2045500; US 
3797628; US 3901368; US 3952851; US 4108296; US 4124111; US 4381552; 
A3... 8920; EP 59511; FR 1465636; No-SR.Pub; US 3498437; US 3682286 

Patent Details: 

Patent No Kind Lan Pg Main IPC Filing Notes 
WO 8502047 A E 57 

Designated States (National) : JP US 
EP 146251 A E 

Designated States (Regional) : AT BE CH DE FR GB IT LI LU NL SE 
EP 308996 A E 

Designated States (Regional) : AT BE CH DE FR GB IT LI LU NL SE 
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EP 308997 A E 

Designated States (Regional) : AT BE CH DE FR GB IT LI LU NL SE 

EP 146251 81 E 20 G07F-003/02 

Designated States (Regional) : AT BE CH DE FR GB IT LI LU NL SE 

DE 3485866 G G07F-003/02 Based on patent EP 146251 

EP 308997 HI E 15 G07F-003/02 

Designated States (Regional) : AT BE CH DE FR GB IT LI LU NL SE 

DE 3486213 G G07F-003/02 Based on patent EP 308997 

Abstract (Basic) : WO 8502047 A 

A coin arrival sensor (6), including a printed circuit inductance 
(10) situated at the side of a coin passageway (7), produces a 
frequency that varies in response to a coin (9) coming into proximity 
to the inductance. A main microprocessor periodically checks the output 
of the sensor and if arrival is confirmed a material/ thickness sensor 
is powered-up. The frequency and amplitude of the latter 's output is 
indicative of the denomination of a genuine coin only. 

The amplitude profile determines when to measure frequency and for 
selection of successive measurements to be combined to give an average 
amplitude value. A signal is produced to indicate that a coin is not 
acceptable if it has travelled too fast through the sensing station. A 
test mode allows the sensors to be adjusted to give optimum operation 
when a particular coin is inserted. 

USE/ADVANTAGE - E.g. for pay telephones. Sensors have low power 
consumption . 

1/6 

Title Terms: COIN; VALID; DENOMINATION; CHECK; INDUCTIVE; CIRCUIT; CONTROL; 

MICROPROCESSOR; DATA; CHECK; COIN; GENUINE 
Index Terms/Additional Words: PAY; TELEPHONE 
Derwent Class: TOl; T05; WOl 

International Patent Class (Main) : G07F-003/02 

International Patent Class (Additional) : G06F-001/00; G07D-005/08 
File Segment: EPI 



7/5/47 (Item 29 from file: 350) 

DIALOG(R) File 350:Derwent WPIX 

(c) 2003 Thomson Derwent. All rts. reserv. 

003353329 

WPI Acc No: 1982-L1351E/198234 
Coin validity checking appts . - has coin sensor arranged to initiate 
application of electrical power to apparatus when coin is sensed 

Patent Assignee: MARS INC (MRSC ); DEAN R (DEAN-I) 
Inventor: DEAN R; HUTCHINSON D; REYNER P J 
Number of Countries: 016 Number of Patents: 016 
Patent Family: 



Patent No 


Kind 


Date 


Applicat No 


Kind 


Date 


Week 
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19810211 
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JP 
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19830217 










198313 


DK 
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19830509 
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GB 
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198507 
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19850213 
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8420150 
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19840808 
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19850220 
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A 
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1190299 
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19850709 










198532 
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us 4601380 A 19860722 US 82425072 A 19820910 198632 

DE 3280357 G 19911017 199143 

EP 58094- Bl 19920513 EP 82300693 A 19820211 199220 

DE 3280401 G 19920617 DE 3280401 A 19820211 199226 

EP 82300693 A 19820211 

Priority Applications (No Type Date) : GB 8137250 A 19811210; GB 814175 a 

19810211; GB 8420613 A 19840814; GB 8420150 A 19840808 
Cited Patents: DE 2825770; US 3599771; US 3738469; WO 8000505; GB 1483192- 

GB 2045500; US 3918565 
Patent Details: 

Patent No Kind Lan Pg Main IPC Filing Notes 
EP 58094 A E 

Designated States (National) : AU DK JP US 
WO 8202786 A E 

Designated States (Regional) : AT BE CH DE FR GB IT LI LU NL SE 
EP 58094 Bl E 39 G07F-003/02 

Designated States (Regional): AT BE CH DE FR GB IT LI LU NL SE 
DE 3280401 G G07F-003/02 Based on patent EP 58094 

Abstract (Basic) : EP 58094 A 

The appts. is for checking the validity of coins and includes a 
coin pathway and at least one sensor for interacting with a coin on the 
pathway to provide an information signal. One of the sensors provides 
an information signal in response to at least the great majority of 
coin types, a circuit determines whether the information signals are 
indicative of an acceptable coin, and a detector is operable by the 
occurrence of the information signal from the said one sensor to 
initiate the application of electrical power adequate for the coin 
checking operation. The detector is adapted to so operate irrespective 
of whether or not the information signal from the one sensor is 
indicative of an acceptable coin. This system can be used for pay 
telephones . 

Title Terms: COIN; VALID; CHECK; APPARATUS; COIN; SENSE; ARRANGE; INITIATE; 

APPLY; ELECTRIC; POWER; APPARATUS; COIN; SENSE 
Derwent Class: Q64; T05; WOl 

International Patent Class (Main) : G07F-003/02 

International Patent Class (Additional) : G06F-001/00; G07D-005/08; 

G08B-021/00 
File Segment: EPI; EngPI 
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Set Items Description 

51 43 (ENCRYPTION OR CRYPTOGRAPHIC) () SERVICE? 

52 2200152 PRICE OR PRICING OR COST? OR CHARG? OR AMOUNT OR QUOTATION 

53 1117 (COMPUTATION? OR CALCULATION? OR FIGURING OR RECKONING) (2N- 

) (BURDEN? OR CHARGE? OR COMMITMENT? OR DUTY OR OBLIGATION OR - 
RESPONSIBILITY) 

54 89 (PRIVACY OR CONFIDENTIALITY) (2N) (LEVEL OR STATUS OR STANDI- 

NG OR IMPORTANT? OR SCORE? OR RANK?) 

55 4451568 SPEED OR TIME OR TIMING OR PERIOD? OR INTERVAL OR CLOCK OR 

SPACING OR FREQUENCY OR DURATION 

56 3 SI AND S2 

57 0 SI AND S3 

58 0 SI AND S4 

59 6 SI AND S5 

510 0 S6 AND S5 

511 9 S6 OR 89 

512 7 Sll AND IC=(G06F? OR H04L?) 

513 1 SI AND (PRICE OR PRICING OR COST?) 
File 347:JAPIO Oct 1976-2003/Aug (Updated 031202) 

(c) 2003 JPO & JAPIO 
File 350:Derwent WPIX 1963-2003/UD, UM &UP=200381 
(c) 2003 Thomson Derwent 
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T S12/5/3-7 

12/5/3 (Item 2 from file: 350) 

DIALOG (R) File 350:Derwent WPIX 

(c) 2003 Thomson Derwent . All rts. reserv. 

014561226 **Image available** 

WPI Acc No: 2002-381929/200241 

XRPX Acc No: N02-298909 
Multiple application loading and management method for smart card, 
involves unlocking card using routine obtained from application provider 
for loading applications 

Patent Assignee: FISHER D L (FISH-I) 

Inventor: FISHER D L 

Number of Countries: 001 Number of Patents: 001 
Patent Family: 

Patent No Kind Date Applicat No Kind Date Week 

US 20020040438 Al 20020404 US 2000202034 P 20000505 200241 B 

US 2001845125 A 20010430 

Priority Applications (No Type Date) : US 2000202034 .P 20000505; US 

2001845125 A 20010430 
Patent Details: 

Patent No Kind Lan Pg Main IPC Filing Notes 

US 20020040438 Al 7 G06F-012/14 Provisional application US 2000202034 

Abstract (Basic) : US 20020040438 Al 

NOVELTY - A previously unreleased one time only key value is 
provided to a prequalified application provider by a card issuer. A 
routine that acts upon the cards is prepared by the application 
provider. Application files are loaded in the card, by unlocking the 
card using the routine to obtain key value, without using 
cryptographic services or a virtual machine such as Java. 

USE - For loading applications onto smart card used in financial 
applications such as cash replacement, credit/debit, gift certificate, 
vending, customer applications such as electronic coupon, value points, 
physical or logical security applications, health and transportation 
applications . 

ADVANTAGE - Enables efficient loading and managing of multiple 
applications on the smart card without affecting existing applications. 

DESCRIPTION OF DRAWING(S) - The figure shows the file structure of 
the card. 

pp; 7 DwgNo 2/3 

Title Terms: MULTIPLE; APPLY; LOAD; ^47\NAGEMENT; METHOD; SMART; CARD; UNLOCK 

; CARD; ROUTINE; OBTAIN; APPLY; LOAD; APPLY 
Derwent Class: TOl; T04; T05; WOl 
International Patent Class (Main) : G06F-012/14 
International Patent Class (Additional) : G06F-009/04 
File Segment: EPI 



12/5/4 (Item 3 from file: 350) 

DIALOG (R) File 350: Derwent WPIX 
(c) 2003 Thomson Derwent. All rts. reserv. 

013972922 **Image available** 
WPI Acc No: 2001-457135/200149 
XRPX Acc No: NOl-338823 
Cryptographic system for computer network, forwards the cryptographic 
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service data from application terminals to specific operating systems 
through separate interface 

Patent Assignee: UNISYS CORP (BURS ) 

Inventor: CLAYTON K F; DEAN D A; KAIN M T; MILLIGAN A D; SALAMON G 
Number of Countries: 023 Number of Patents: 004 
Patent Family: 



Patent No 


Kind 


Date 


Applicat No 


Kind 


Date 


Week 


WO 


200135194 


A2 


20010517 


WO 


2000US30592 


A 


20001107 


200149 B 


AU 


200114711 


A 


20010606 


AU 


200114711 


A 


20001107 


200152 


EP 


1230777 


A2 


20020814 


EP 


2000977017 


A 


20001107 


200261 










WO 


2000US30592 


A 


20001107 




JP 


2003514414 


W 


20030415 


WO 


2000US30592 


A 


20001107 


200328 










JP 


2001536662 


A 


20001107 





Priority Applications (No Type Date): US 2000521371 A 20000308; US 99J64673 

P 19991110 
Patent Details: 

Patent No Kind Lan Pg Main IPC Filing Notes 
WO 200135194 A2 E 36 G06F-001/00 

Designated States (National): AU BR JP 

Designated States (Regional) : AT BE CH CY DE DK ES FI FR GB GR IE IT LU 
MC NL PT SE TR 

AU 200114711 A G06F-001/00 Based on patent WO 200135194 

EP 1230777 A2 E H04L-029/06 Based on patent WO 200135194 

Designated States (Regional): AT BE CH CY DE DK ES FI FR GB GR IE IT LI 

LU MC NL PT SE TR 
JP 2003514414 W 51 H04L-009/14 Based on patent WO 200135194 

Abstract (Basic) : WO 200135194 A2 

NOVELTY - The operating systems (210,220,230,240) are connected 
through communication interface (124), such that primary system 
transfers and receives information to and from other operating systems. 
Operating system (210) is operated in accordance with operating system 
(220), such that cryptographic service data from application 
terminals (203,205) is forwarded to system (210) through separate 
interface (207) . 

DETAILED DESCRIPTION - An INDEPENDENT CLAIM is also included for 
cryptographic service providing method. 

USE - For providing cryptographic services in computing network 
e.g. internet used for commercial transaction, on-line shopping and 
other communication services. 

ADVANTAGE - Since operating systems are monitored periodically 
during cryptographic service , the request is redistributed to 
alternative operating system during failure generation, thereby ensures 
effective failure protection. 

DESCRIPTION OF DRAWING(S) - The figure shows the block diagram 
illustrating the cooperation of various operating systems along with 
cryptographic system. 

Interfaces (124, 207) 
Application terminals (203,205) 
Operating systems (210,220,230,240) 
pp; 3 6 DwgNo 2/6 
Title Terms: CRYPTOGRAPHIC; SYSTEM; COMPUTER; NETWORK; FORWARD; 

CRYPTOGRAPHIC; SERVICE; DATA; APPLY; TERMINAL; SPECIFIC; OPERATE; SYSTEM; 
THROUGH; SEPARATE; INTERFACE 
Derwent Class: P85; TOl; WOl 

International Patent Class (Main) : G06F-001/00 ; H04L-009/14 ; 
H04L-029/06 

International Patent Class (Additional) : G06F-015/00 ; G09C-001/00 
File Segment: EPI; EngPI 
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12/5/5 (Item 4 from file: 350) 

DIALOG(R) File 350:Derwent WPIX 
(c) 2003' Thomson Derwent. All rts. reserv. 

013870609 **Image available** 
WPI Acc No: 2001-354821/200137 

Related WPI Acc No: 2001-354820; 2001-367188; 2001-397516; 2001-535950 

XRPX Acc No: NOl-257844 
Authenticated transaction of implantation method for use in electronic 
commerce, involves comparing enrollment and current authentication data 
and transaction identifiers of user to generate an authentication result 

Patent Assignee: ETHENTICA INC (ETHE-N) 

Inventor: BERGER B; BROOKS A A; CLAYTON R F; CLOUGH P W; DAVENPORT R S; 
DICKINSON A G; DOBSON R T; FERRANTE M; OHARE M S; ORSINI R L; ROHRBACH M 
D; STARK G H; ZOCCOLI J G 
Number of Countries: 094 Number of Patents: 003 
Patent Family: 



Patent No 


Kind 


Date 


Applicat No 


Kind 


Date 


Week 


WO 200122322 


A2 


20010329 


WO 2000US25814 
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20000920 


200137 


AU 200075962 
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20010424 


AU 200075962 
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20000920 


200141 


EP 1218841 


A2 


20020703 


EP 2000965213 


A 


20000920 


200251 








WO 2000US25814 


A 


20000920 





Priority Applications (No Type Date): US 2000200396 P 20000427; US 99154734 

P 19990920 
Patent Details: 

Patent No Kind Lan Pg Main IPC Filing Notes 

WO 200122322 A2 E 88 G06F-017/60 

Designated States (National) : AE AG AL AM AT AU AZ BA BB BG BR BY BZ CA 

CH CN CR CU CZ DE DK DM DZ EE ES FI GB GD GE GH GM HR HU ID IL IN IS JP 

KE KG KP KR KZ LC LK LR LS LT LU LV MA MD MG MK MN MW MX MZ NO NZ PL PT 

RO RU SD SE SG SI SK SL TJ TM TR TT TZ UA UG UZ VN YU ZA ZW 

Designated States (Regional) : AT BE CH CY DE DK EA ES FI FR GB GH GM GR 

IE IT KE LS LU MC MW MZ NL OA PT SD SE SL SZ TZ UG ZW 

AU 200075962 A G06F-017/60 Based on patent WO 200122322 

EP 1218841 A2 E G06F-017/60 Based on patent WO 200122322 

Designated States (Regional): AL AT BE CH CY DE DK ES FI FR GB GR IE IT 
LI LT LU LV MC MK NL PT RO SE SI 

Abstract (Basic) : WO 200122322 A2 

NOVELTY - The current authentication data and transaction 
identifier (TID) which is received from a user and forwarded to 
authentication engine, is compared with enrollment authenti f ication 
data and TID of the user. The comparison is performed to generate an 
authentif ication result. 

DETAILED DESCRIPTION - INDEPENDENT CLAIMS are also included for the 
following: 

(a) Cryptographic transaction implementing method; 

(b) Cryptographic system; 

(c) Cryptographic function facilitating method; 

(d) Authentication process speed increasing method; 

(e) Authentication transaction conducting method; 

(f) Electronic transaction authenticating system; 

(g) Cryptographic function providing apparatus; 

(h) Security function performing method; 

(i) Cryptographic service providing method; 
(j) Authentif ication function performing method; 

(k) Cryptographic application programming interface interconnecting 
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method; 

(1) Security function performing apparatus 

USE - For providing security to transaction in electronic commerce. 

ADVANTAGE - A level of trust is generated for the authentication 
data associated with the authenticated transaction and a response is 
provided for use in the transaction. 

DESCRIPTION OF DRAWING (S) - The figure shows the block diagram of 
cryptographic system, 
pp; 88 DwgNo 1/20 
Title Terms: AUTHENTICITY; TRANSACTION; IMPLANT; METHOD; ELECTRONIC; 
COMPARE; CURRENT; AUTHENTICITY; DATA; TRANSACTION; IDENTIFY; USER; 
GENERATE; AUTHENTICITY; RESULT 
Derwent Class: TOl 

International Patent Class (Main) : G06F-017/60 
File Segment: EPI 



12/5/6 (Item 5 from file: 350) 

DIALOG(R) File 350:Derwent WPIX 

(c) 2003 Thomson Derwent. All rts. reserv. 

012457298 **Image available** 
WPI Acc No: 1999-263406/199922 
XRPX Acc No: N99-196197 

Cryptographic coprocessor used in secure communication platform on an 

integrated circuit 
Patent Assignee: INFORMATION RESOURCE ENG INC (INFO-N); SAFENET INC 



(SAFE-N) ; OBER T 


(OBER-I) ; 


REED P (REED-I) 








Inventor: DOUD 
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REED P 
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Provisional application US 9759839 
Cont of application US 98154133 

US 6412069 Bl H04L-009/00 Provisional application US 9759082 

Provisional application US 9759847 

US 6453415 Bl H04L-009/00 Provisional application US 9759082 

Provisional application US 9759840 

US 6631472 B2 G06F-013/00 Provisional application US 9759082 

Provisional application US 9759843 
Cont of application US 98154357 
Cont of patent US 6282657 

US 6654465 B2 H04L-009/32 Provisional application US 9759082 

Provisional application US 9759845 
Cont of application US 98154120 
Cont of patent US 6278782 



Abstract (Basic) : WO 9914881 A2 

NOVELTY - The coprocessor includes a processing unit for processing 
data. A read only memory is electronically linked to the processing 
unit and includes a masked programmed cryptographic library of 
encryption algorithms. An encryption processor is provided for 
encrypting data. The encryption processor and the processing unit are 
situated on the same platform. 

DETAILED DESCRIPTION - The encryption circuit (36), random number 
generator circuit (38), public key accelerator circuit (28), registers 
(34), hash circuit (30), mode control circuit (24) and other circuits 
used in the coprocessor may be implemented by discrete components or 
may be equivalently formed as part of the DSP (20) , which may be 
programmed to provide the functions of these circuits. 

INDEPENDENT CLAIMS are included for: 

(a) a cryptographic service software embodied in at least one 
of a hard disk, floppy disk and a ROM 

■(b) a method of securely communicating between application program 
and secure kernel of integrated circuit 

(c) a hardware secure memory area 

(d) a method of expanding a protected memory area of a secure 
kernel into an unprotected memory area of an integrated circuit 

(e) a method of reconfiguring the functionality of an integrated 
circuit 

(f) a method of generating a recovery key encryption key 

(g) a method of monitoring and controlling program fetch addresses 
from a processor to control access to protected memory 

USE - The invention relates generally to a secure communication 
platform on an integrated circuit, and more particularly relates to a 
digital signal processor (DSP) with embedded encryption security 
features on a single integrated circuit for high speed networking 
products such as routers, switches and hubs. 

ADVANTAGE - The object of the present invention is to provide a 
secure communications platform that can implement a user's application 
and dedicate cryptographic resources to encryption and decryption 
requests on demand. The invention also provides an increase in 
encryption security through hardware implementations 

DESCRIPTION OF DRAWING(S) - The drawing is a block diagram of the 
cryptographic coprocessor. 

encryption circuit (36) 

random number generator circuit (38) 

public key accelerator circuit (28) 

registers (34) 

hash circuit (30) 
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mode control circuit (24) 
DSP (20) 

pp; 401 DwgNo 1/50 
Title Terms: CRYPTOGRAPHIC; SECURE; COMMUNICATE; PLATFORM; INTEGRATE; 

CIRCUIT 
Derwent Class: TOl; WOl 

International Patent Class (Main) : G06F-012/14 ; G06F-013/00 

H04L-000/00 ; H04L-001/00 ; □H04L- 009/ OOD ; □H04L-009/ 320 
File Segment: EPI 



12/5/7 (Item 6 from file: 350) 

DIALOG(R) File 350:Derwent WPIX 

(c) 2003 Thomson Derwent. All rts. reserv. 

009394225 **Image available** 

WPI Acc No: 1993-087692/199311 

XRPX Acc No: N93-067116 
Cryptographic facility for data processing system - uses object-oriented 
techniques to define hierarchical structure representing cryptographic 
services 

Patent Assignee: INT COMPUTERS LTD (INCM ) 
Number of Countries: 001 Number of Patents: 001 
Patent Family: 

Patent No Kind Date Applicat No Kind Date Week 

GB 2259590 A 19930317 GB 9217274 A 19920814 199311 8 

Priority Applications (No Type Date) : GB 9119700 A 19910914 
Patent Details: 

Patent No Kind Lan Pg Main IPC Filing Notes 
GB 2259590 A 19 G06F-009/44 

Abstract (Basic) : GB 2259590 A 

The cryptographic facility for a data processing system, includes 
device which defines a hierarchical structure of object classes 
defining cryptographic services , wherein each class can inherit 
functions and data from a base class in the hierarchy. A forming device 
creates an instance of an object class, defining an additional or new 
cryptographic service , and automatically registers that instance 
with a list of services supported by the system. 

A removal device destroys an instance of an object class, defining 
a cryptographic service , and automatically de-registers that 
instance with the list of services supported by the system. An access 
device accesses the functions of an instance of an object class, 
through a base class of the object class in the object class hierarchy, 

ADVANTAGE - Simplifies introduction of new object to system, and 
minimises amount of re-compilation in providing algorithm code and 
associated reference. 

Dwg. 5,6/6 

Title Terms: CRYPTOGRAPHIC; FACILITY; DATA; PROCESS; SYSTEM; OBJECT; ORIENT 
; TECHNIQUE; DEFINE; HIERARCHY; STRUCTURE; REPRESENT; CRYPTOGRAPHIC; 
SERVICE 

Index Terms/Additional Words: DATA; ENCRYPTION; KEY; GENERATION 
Derwent Class: TOl 

International Patent Class (Main) : G06F-009/44 
File Segment: EPI 
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T S13/5 

13/5/1 (Item 1 from file: 350) 

DIALOG (R) File 350:Derwent WPIX 

(c) 2003 Thomson Derwent. All rts. reserv. 

014786862 **Image available** 

WPI Acc No: 2002-607568/200265 

XRPX Acc No: N02-481149 
Cryptographic operation execution method in data processing system, 
involves selecting software and hardware process based on policy which 
process results in available resources to perform cryptographic operation 

Patent Assignee: INT BUSINESS ^4ACHINES CORP (IBMC ) 

Inventor: LEUNG L Y; NADALIN A J; RICH B A; SHRADER T J L 

Number of Countries: 001 Number of Patents: 001 

Patent Family: 

Patent No Kind Date Applicat No Kind Date Week 

US 20020078348 Al 20020620 US 2000738243 A 20001215 200265 B 

Priority Applications (No Type Date): US 2000738243 A 20001215 
Patent Details: 

Patent No Kind Lan Pg Main IPC Filing Notes 
US 20020078348 Al 13 H04L-009/00 

TUDstract (Basic) : US 20020078348 Al 

NOVELTY - Software and hardware processes are selected for 
performing a cryptographic operation based on a policy. The policy 
processes the results in available resources to perform the 
cryptographic operation and to form a selected process. The 
cryptographic operation is performed using the selected process. 

DETAILED DESCRIPTION - INDEPENDENT CLAIMS are included for the 
following : 

(1) Data processing system; and 

(2) Computer program product comprising instructions for 
cryptographic operation execution. 

USE - In data processing system (claimed) such as notebook 
computer, handheld computer, personal digital assistant. 

ADVANTAGE - The ability to configure the usage of different form's 
of implementation greatly, increases the performance and reduces the 
cost of cryptographic services . Less restricted operations are 
done by cheaper but faster software while sensitive operation are 
carried out by secure hardware. Implementation of both hardware and 
software provides flexible unit for user to determine the usage of each 
kind of service. 

DESCRIPTION OF DRAWING(S) - The figure shows a flowchart of the 
cryptographic execution method, 
pp; 13 DwgNo 5/6 

Title Terms: CRYPTOGRAPHIC; OPERATE; EXECUTE; METHOD; DATA; PROCESS; SYSTEH 
; SELECT; SOFTWARE; HARDWARE; PROCESS; BASED; PROCESS; RESULT; AVAILABLE; 
RESOURCE; PERFORMANCE; CRYPTOGRAPHIC; OPERATE 

Derwent Class: TOl; WOl 

International Patent Class (Main) : H04L-009/00 

File Segment: EPI 
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12/5, K/3 (Item 3 from file: 348) 
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(c) 2003 European Patent Office. All rts. reserv. 

01330100 
DATA AUTHENTICATION SYSTEM 
DATEN- IDENTIF I Z lERUNGS - SYSTEM 
SYSTEMS D'AUTHENTIFICATION DE DONNEES 

PATENT ASSIGNEE: 

Sony Corporation, (214028), 7-35, Kitashinagawa 6-chome, Shinagawa-ku, 
Tokyo 141-0001, ( JP) , (Applicant designated States: all) 
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ISHIBASHI, Yoshihito, Sony Corporation, 7-35, Kitashinagawa 6-chome, 

Shinagawa-ku, Tokyo 141-0001, (JP) 
SHIRAI, Taizo, Sony Corporation, 7-35, Kitashinagawa 6-chome, 

Shinagawa-ku, Tokyo 141-0001, (JP) 
AKISHXTA, Toru, Sony Corporation, 7-35, Kitashinagawa 6-chome, 
Shinagawa-ku, Tokyo 141-0001, (JP) 
LEGAL REPRESENTATIVE: 

Robinson, Nigel Alexander Julian et al (69551), D. Young & Co., 21 New 
Fetter Lane, London EC4A IDA, (GB) 
PATENT (CC, No, Kind, Date) : EP 1195734 Al 020410 (Basic) 

WO 200154099 010726 
APPLICATION (CC, No, Date) : EP 2001901463 010119; WO 2001JP346 010119 
PRIORITY (CC, No, Date) : JP 200013322 000121; JP 200015551 000125; JP 
200015858 000125; JP 200016029 000125; JP 200016213 000125; JP 
200016251 000125; JP 200016292 000125 
DESIGNATED STATES: AT; BE; CH; CY; DE; DK; ES; FI ; FR; GB; GR; IE; IT; LI; 

LU; MC; NL; PT; SE; TR 
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RELATED DIVISIONAL NUMBER(S) - PN (AN): 

(EP 2002078475) 
INTERNATIONAL PATENT CLASS: G09C-001/00; H04L-009/32 

ABSTRACT EP 1195734 Al 

A data processing apparatus a data processing method efficiently 
ascertain that data are valid, prevent encryption processing key data 
from leaking, eliminate illegal use of contents data, restrict contents 
utilization, apply a different plurality of data formats to contents and 
efficiently execute reproduction processing of compressed data. The 
verification process of partial data is executed by collating the 
integrity partial data as check values for a combination of partial data 
of a content, and the verification process of the entirety of the 
combination of partial data is executed by collating 
partial-integrity-check-value-verifying integrity check values that 
verify the combination of the partial integrity check values. Master keys 
to generate individual keys necessary for a process of such as data 
encryption are stored in the storage section and keys are generated as 
required. An illegal device list is stored in the header information of a 
content and referred to when data is used. Keys specific to a data 
processing apparatus and common keys are stored and the keys are 
selectively used according to the content use restriction. Plural content 
blocks, are coupled, and at least a part of the content blocks is applied 
to an encryption process by an encryption key Kcon, then encryption key 
data that is the encryption key Kcon encrypted by an encryption key Kdis 
is stored in the header section. A content data is made of compression 
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data and an expansion processing program or a combination of types of 
compression programs and the reproducing apparatus can determine an 
expansion program applicable to a compressed content. 

ABSTRACT WORD COUNT: 25 8 

NOTE: 

Figure number on first page: 28 

LEGAL STATUS (Type, Pub Date, Kind, Text) : 
Application: 010919 Al International application. (Art. 158(1)) 

Application: 010919 Al International application entering European 

phase 

Application: 020410 Al Published application with search report 

Examination: 020410 Al Date of request for examination: 20011026 

Change: 021016 Al Application number of divisional application 

(Article 76) changed: 20020829 

LANGUAGE ( Publication , Procedural , Application ) : English; English; Japanese 

FULLTEXT AVAILABILITY: 

Available Text Language Update Word Count 

CLAIMS A (English) 200215 13797 

SPEC A (English) 200215 73409 
Total word count - document A 87206 
Total word count - document B 0 
Total word count - documents A + B 87206 



...INTERNATIONAL PATENT CLASS: H04L-009/32 



. .SPECIFICATION from which data is transferred, the key generating step is 
an authentication key generating step of executing encryption 
processing based on an authentication key generation master key MKake for 
generating an authentication key Kake of... the expansion processing 
program from header information included in the received content data 
and, at the same time , if the content data has the compressed contents, 
obtaining a type of a compressing processing program applied ... the 
expansion processing program from header information included in the 
received content data and, at the same time , if the content data has 
the compressed contents, obtaining a type of a compressing processing 
program applied ... different types of data formats such as formats 
corresponding to game programs and formats suitable for real- time 
processing of music data or the like can be used for the present system. 
The aspects of the time of starting the use. 

The integrity check value A ICVa is used to verify that the content... 
intensity compared to the Single DES. The Tripled DES configuration, 
however, has the disadvantage of requiring an amount of processing 
time three times as large as that for the Single DES. 

Fig. 10 shows an example of a... a desired program. This configuration 
eliminates the need for the user to retrieve programs to save the amount 

of time and labor required for the activation. Additionally, the 
programs that can be activated are activated after all... 
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ABSTRACT EP 1128598 Al 

An information receiving apparatus receives identification information 
and encrypted identification information and makes a comparison between 
them to allow prevention of illegal utilization of contents data. Also, a 
data storage apparatus can record contents data encrypted by a content' 
key and the content key so that the contents data can be reproduced on 
other apparatuses to improve versatility. Moreover, a management 
apparatus can manage the contents data in the data storage apparatus to 
allow other apparatuses to utilize it. And also, an information 
regulating apparatus can verify a signature on available data to prevent 
illegal utilization of the contents data. Furthermore, the data storage 
apparatus can store the content key, its handling policies, the contents 
data encrypted by the content key and its license conditions information 
so as to safely provide the contents data. In addition, an information 
recording apparatus can select favorite contents data and store it on the 
data storage apparatus. Furthermore, the information receiving apparatus 
can prevent utilization of provision-prohibited contents data by a 
provision prohibition list. 

ABSTRACT WORD COUNT: 172 
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...SPECIFICATION electronic distribution service center 1. 

Figure 2 is a block diagram showing functions of the electronic 
distribution service center 1. A service provider management section 11 
supplies the public key certificate of the service provider ... elect ronic 
distribution service center 1, and outputs the results to the signature 
generation section 38. Incidentally, the encryption method is not 
limited to DES, and a public key encryption method such as RSA (Rivest, 
Shamir. . . 



.shown as a common key encryption in this embodiment, either FEAL (Fast 
Encryption Algorithm), IDEA (International Data Encryption Algorithm), 
or E2 proposed by NTT (trademark) or AES (Advanced Encryption Standard) 
that is the next encryption ... may be different keys. 

In addition, as another example of the public key encryption method, 
the RSA encryption (Rivest, Shamir, Adleman) is known. 

Figure 14 is a block diagram showing a configuration of the service... 
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electronic distribution service center 1 further compares the handling 
policy received from the content provider 2, the price information and 
the handling policy, if necessary, received from the service provider 3, 
and the handling policy and the price information received from the 
user home network 5, and monitors whether or not illegality such as 
tampering. . .Figure 29 illustrates the service provider secure container. 
The service provider secure container 3A is comprised of price 
information and signatures. The signature is data generated by applying 
the secret key Kssp) ) of the service provider 3 to a hash value generated 
by applying a hash function to price information, if necessary. 

Figure 30 illustrates another example of the service , provider secure 
container. The service provider secure container 3B includes the content 
provider secure container, price information and signatures. The 
signature is data generated by applying the secret key Kssp)) of the 
service. . . 



..a hash value generated by applying a hash function to the content 
provider secure container and the price information. 

Figure 31 illustrates the public key certificate of the service 
provider 3. The public key certificate ... handling policy for the single 
content (Figure 37), a type of the data, a type of the price 
information, an effective period of the price information, an ID of 
the contents, an ID of the service provider, an ID of the price 
information, a version of the price information, a regional code, 
usable apparatus conditions, usable user conditions, an ID of the content 
provider, an ID of the handling policy to which the price information 
is added, the number of rules including the purchasable utilization right 
indicated by the price information, address information indicating the 
storage position of the rules, the rules stored in the position indicated 



...handling policy for the single content (Figure 38), a type of the data, 
a type of the price information, an effective period of theDpriceu 
information, an ID of the album, an ID of the service provider, an ID of 
the price information, a version of the price information, a regional 
code, usable apparatus conditions, usable user conditions, an ID of the 
content provider, an ID of the handling policy to which the price 
information is added, the number of pieces of price information of 
single contents forming the album, address information indicating a 
storage position of the price information of the single contents, a 
data packet of the price information of the ...indicated by the 
address information, the number of rules including the purchasable 
utilization right indicated by the price information, address 
information indicating the storage position of the rules, the rules 
stored in the position indicated. . . 

..ratio of the service provider, a price, a data size, and transmission 
information . 

In the above-mentioned price information, a type of data indicates 
that the data is the data of price information, and a type of the 
price information indicates which of single or album contents the price 
information is. The effective period of the price information 
indicates a usage period of the price information by a date on which 
the period expires, or by the number of days from a date to be a basis 
when the use has started to a data when the period expires. An ID of 
the contents and an ID of the album indicates the purchasable single 
contents or album contents indicated by the price information, an ID of 
the service provider indicates the ID of the service provider 3 that has 
prepared the price information. 

In addition, an ID of the price information is for identifying the 
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price information, and is used, for example, for identifying the price 
information in the case in which a plurality of pieces of price 
information are set for identical contents. A version of the price 
information indicates revision information of price information that is 
revised according to a use period . Therefore, the price information 
IS managed by the ID of the price information and the version of the 

price information. 

A regional code indicates a region where price information is usable 
by coding the region, and. . . 

...point, and various kinds of information set by the service provider 3, 
if necessary. 

Here, when generating price information, the service provider 3 can 
set all the purchasable utilization right indicated by a corresponding a 
handling policy as a purchasable right indicated by the price 
information, and at the same time , can set a utilization right 
arbitrary selected out of all the purchasable utilization right indicated 
by the... data of license conditions information, a type of data, a type 
of license conditions information, an effective period of the license 
conditions information, an ID of contents, an ID of an album, an ID of... 

...a handling policy, version of the handling policy, an ID of a service 
provider, an ID of price information, a version of price information, 
an ID of license conditions information, a rule number attached to a 
reproduction right (utilization right) as a serial number, a utilization 
right content number, a remaining number of time of reproduction, an 
effective period of the reproduction right, a rule number attached to a 
copying right {utilization right) as a serial... 

...utilization right, and uses a rule number of a rule indicated by a 
corresponding handling policy or price information as it is. 
Utilization right contents indicate contents of a reproduction right to 
be described later. . . 

...of reproduction among a number of times of reproduction set in advance 
to contents, and an effective period of a reproduction right indicates 
a corresponding reproduction available period of purchased contents by 
a date and time when the period expires. 

In addition, a rule number of a copying right indicates a serial 
number attached to a... a content provider and the transmission 
information set by the content provider, and a data size indicating 
price information used for purchase processing and transmission 
information are stored as they are in a data size... 

...indicates an apparatus of a supplier that has applied purchase 
processing, and the ID is accumulated every time re-purchase of 
contents is conducted. 

Incidentally, in charge information, since a profit amount and a 
prof it. and the registration data encrypted by the temporary key Ktemp) } 
updates stored registration information, at the same time , inspects the 
registration information, and if registration is made, encrypts the 
delivery key Kd) ) with the temporary. . . 

..updates a delivery key Kd) ) stored in the storage module in the 
encryption processing section, and deletes charge information in the 
storage module. Subsequently, the settlement available apparatus 
retrieves an object apparatus that it should ... additionally registered in 
the electronic distribution service center 1 by the processing procedures 
indicated in Figure 60. 

Timing for a registered apparatus to conduct update of a 
registration (update of registered information) will now be... 
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...on various conditions, and in step S600, the home server 51 determines 
whether or not a predetermined period that is decided in advance has 
passed since obtaining a delivery key Kd) ) , registration information or 
charge information by a clock (not shown) and a determination section 
(not shown) . If a positive result is obtained here, this means that the 
predetermined period has passed since obtaining a delivery key Kd) ) , 
registration information or charge information, then, the processing 
proceeds to step S607, where the home server 51 executes update 
processing of . . . 

...the other hand, if a negative result is obtained in step S600, this 
means that a predetermined period has not passed since obtaining a 
delivery key or charge information, that is updating conditions of 
registration information with respect to passage of a period has not 
been met, and then, the processing proceeds to step S601. 

In step S601, the home . . . a registration item corresponding to an 
apparatus ID in the user registration database, and at the same time 
updates data. For example, the data is such data as a registration date 
or a charge status (not shown) . Since step S106 is the same as step 
S84 of Figure 59, its description... 

...electronic signature included in the registration information by the 
signature verification unit 115, and at the same time , causes the unit 
to confirm if an apparatus ID of the home server 51 is registered, and 
when the verification is successful and it is confirmed that the charge 
processing is completed, the processing proceeds to step SllO. In step 
SllO, the home server 51 input. . . 

...encryption/decryption module 96, stores (updates) the delivery key Kd) ) 
in the storage module 92, and deletes charge information held in the 
storage module 92 (this makes settlement completed) . 
In step 3103, if it is. . . 

...error processing is performed. 

In this way, the home server 51 updates registration information, at 
the same time , transmits charge information to the electronic 
distribution service center 1, and receives supply of a delivery key Kd) ) 
in... home server 51. 

The home server 51 having received the data stores the handling policy 
and the price information, if received, in the mass storage section 68, 
and at the same time , inputs the charge information encrypted by the 
temporary key Ktemp) ) and its signature in the encryption processing 
section 65. The encryption processing section 65 having received the 
charge information encrypted by the temporary key Ktemp)) and its 
signature verifies the signature for the charge information encrypted 
by the temporary key Ktemp)) by the signature verification unit 115 of 
the encryption/decryptionmodule . . . 

...its details are omitted. Then, the decryption unit 111 of the 
encryption/decryption module 96 decrypts the charge information 
encrypted by the temporary key Ktemp) ) . 

In step 3124, the home server 51 mutually authenticates with... 

..the user management section 18 of the electronic distribution service 
center 1 updates the user registration database { charge data receipt 
data and time , issued data and time of registration information, date 
and time of a delivery key, etc.). In step 3130, the user management 
section 18 of the electronic distribution ... delivery key Kd) ) in the 
storage module of the encryption processing section 73, and at the same 
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time , deletes the charge information (further, in some case, the 
charge information is not deleted, but is attached a mark indicating it 
is settled) . 

In step S121, if... the processing of step S165 and step S166 
As described above, the home server 51 stores the charge information 
in the storage module 92, and at the same time , after decrypting the 
content key Kco) ) by the individual key Kl)), encrypts the content key 
Kco)) by the charge information in the storage module of the encryption 
processing section 73 by the similar processing, and at the same time , 
decrypts the content key Kco)) by the individual key Kl)), encrypts the 
content key Kco)) by the ... contents . 

Figures 76 and 77 illustrate concrete examples of a rule portion of a 
handling policy and price information. In Figure 76, the handling 
policy is composed of a rule number attached to each utilization... 

..as a serial number, a utilization contents number indicating utilization 
right contents, its parameter, a minimum sales price , and a profit 
ratio of a content provider, in which, for example, five rules are 
written . Since . . . 



...item, it is seen from Figure 44 that the right is a right without a 
reproduction right, time and number of times limitations. In addition, 
it is seen that there is no specific description in the item of a 
parameter. The minimum sales price is (Yen) 350, and a share of the 
content provider 2 is 30% of the price . Since a rule 2 has a 
utilization right contents number 2 as the right item, it is seen from 
Figure 44 that the right is a right with a reproduction right and time 
limitation and without number of times limitation. In addition, it is 
seen from the item of a parameter that a utilization possible period is 
one hour. The minimum sales price is (Yen) 100, and the share of the 
content provider 2 is 30% of the price . Since a rule 3 has a 
utilization right contents number 6 as the right item, it is... 

...44 that the right is a right without a reproduction right (without a 
copy control signal), without time limitation and with number of times 
limitation. In addition, it is seen from the item of a parameter that the 
utilization possible number of times is one. The minimum sales price is 
(Yen) 30, and the share of the content provider 2 is 30% of the price 

Since a rule 4 has a utilization right contents number 13 as the right 
item, it is . . . 

...the item of a parameter that a changeable rule number from #2 (with a 
reproduction right, with time limitation and without number of times 
limitation) to #1 (without a reproduction right, time and number of 
times limitation) . The minimum price is (Yen) 200, and the share of the 
content provider 2 is 20% of the price . The minimum sales price is 
presented lower than that of the rule 1 because it is considered that an 
already purchased... 

...service center 1 that performs actual work (since the content provider 2 
has no work at the time of right contents change) . 

Since a rule 5 has a utilization right contents number 14 as the,.. 

...that redistribution possible conditions is that an apparatus having the 
rule number #1 (without a reproduction right, time and number of times 
limitation) purchases and redistribute the rules number #1 (without a 
reproduction right, time and number of times limitation) . The minimum 
sales price is (Yen) 250, and the share of the content provider 2 is 20r. 
of the price . The minimum sales price is lower than that of the rule 
1 because it is considered that an apparatus having an... 
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...center 1 that performs actual work (since the content provider 2 does 
not have work at the time of redistribution) . 

In Figure 77, the price information is composes of a rule number 
attached to each. . . 

...as a serial number, a utilization contents number indicating utilization 
right contents, it parameter, a minimum sales price , and a profit ratio 
of a content provider, the price information is composes of a rule 
number attached to each utilization right as a serial number, a parameter 
and price information, and the license conditions information is 
composed of a rule number attached to each utilization right... 

...server 51 has already purchased a right with a reproduction right with 
the rule number #2 and time limitation, and the rule number #2 is 
described in the license conditions information indicating right 
contents, which indicates that remaining utilization possible time is 
thirty minutes, and accumulated two hours of purchase has been performed 
so far. If it is tried to change the right from with time limitation to 
without time limitation now, it is seen from a rule 3 of the handling 
policy, a rule 3 of the price information and the license conditions 
information that the right can be changed to without a reproduction 
right, time and number of times limitation with (Yen) 200, and the 
license conditions information changes to without a reproduction right, 
time and number of times limitation of the rule number #1 and the 
utilization right contents number (a... 

...described later. In addition, in this example, changing the right 

contents once after buying a right with time limitation is cheaper than 
directly buying a right without a reproduction right, time and number 
of times limitation. Thus, it is better to put a discount considering 
accumulated utilization time 

Figure 79 is a flow chart illustrating details of processing in which 
the home server 51 purchases... 

...home server 51 displays information whose contents can be redistributed 
(e.g., a utilization form or a price whose contents can be 
redistributed) using the display means 64, and a user selects 
redistribution contents conditions using the inputting means 63. Further, 
this selection processing may be performed at the time of starting the 
redistribution processing in advance. The signal inputted from the 
inputting means 63 is transmitted. . . 

...processing section 65 of the home server 51. The encryption processing 
section 65 having received this generates charge information and new 
license conditions information from the handling policy and the price 
information received in step S264, and the license conditions information 
read out in step 3265. 

Since step... fixed apparatus 52 displays information whose contents 
can be redistributed (e.g., a utilization form or a price whose 
contents can be redistributed) using the display means 78, and a user 
selects redistribution contents conditions using the inputting means 77. 
Further, this selection processing may be performed at the time of 
starting the redistribution processing in advance. The signal inputted 
from the inputting means 77 is transmitted. . . 

...processing section 73 of the fixed apparatus 52. The encryption 

processing section 73 having received this generates charge information 
and new license conditions information from the handling policy, the 
price information and the license conditions information received in 



http://www.dialogclassic.com/main.vmgw 



12/22/03 



DialogClassic Web(tm) 



Page 10 of 62 



step S286. 

In step S290, the encryption processing section... a purchase 
reservation of contents by performing key conversion of the contents in 
advance before an effective period of a delivery key is expired will be 
described. In step S451 of reservation purchase processing procedures... 

...its detailed description is omitted. However, in the reservation 

purchase processing, decision of a registration information update 
timing based on a number of purchase and a purchase price described in 
steps S601 and S602 of Figure 61 may not be performed. 
In step S452, the ... processing . 

As described above, the home server 51 completes the purchase 
processing of contents by storing the charge information of the 
contents that a user selected to purchase in the storage module 92 and, 
at the same time , storing the license conditions information in the 
external memory 67. In the purchase processing, the signature 
verification. .. in Figure 41, its details are omitted. 

In step S562, the encryption processing section 73 saves the charge 
information generated in step S561 in the storage module in the 
encryption processing section 73. In step... 

..key encrypted in step S557, the encryption processing section 73 
verifies a signature, and at the same time , decrypts the signature by 
the temporary key Ktemp) ) , and re-encrypts it by the save key Ksave2 . . . in 
performing purchase processing in the above-mentioned embodiment, the 
processing is sometimes omitted because it takes time . In addition, 
whether or not verification is sometimes necessary is described in a 
handling policy or price information, and operations are performed in 
accordance with it. 

(6) Data format of various kinds of data... 

..ID of the encryption processing section in the license conditions 
information prepared again, and at the same time , stores a number of 
times found by deducting one from the remaining number of times content 
can . . . 

..of the encryption processing section in the first apparatus as an ID of 
a supplier in the charge information prepared along the purchase 
processing . 

Then, thereafter, if the contents to which the purchase processing is 
...the electronic distribution service center 1. 

Thus, in the electronic distribution only recording medium 251, for 
example, charge information in the storage module 311 is periodically 
retrieved from the control section 310 in the encryption processing 
section 301, and if there is uncollected charge information in the 
electronic distribution service center 1, contents can only be reproduced 
only one from purchase processing until the charge information is 
collected by applying reproduction limitation to corresponding contents, 
and at the same time , managed transfer of the contents is not performed 
as well. 

In this way, in the electronic music ... times of reproduction 
limitation, the contents cannot be reproduced. 

In addition, as such a reproduction limitation, a period ( time ) 
may be used. That is, by setting time during which contents can be 
reproduced, if charge information is uncollected after the set time 
has passed since purchase processing, the contents cannot be reproduced. 
Further, in the electronic distribution only recording medium 251, 
limitation contents of the reproduction limitation may be held by 
associating it with charge information in the storage module 311 of the 
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encryption processing section 301, or may be held by.., 

...in the external membry 303. In addition, by storing reproduction 
limitation (the number of times or a period ) in a handling policy 
and/or price information, at the time of purchase processing, the 
electronic distribution only recording medium 251 may take out 
information of the reproduction limitation from the handling policy 
and/or the price information, prepare license conditions information 
including this, and hold the prepared license conditions information in 
the external. . .memory 303 in a step prior to the step S712. 

In such purchase processing, if an effective period of the delivery 
key Kd)) is expired in step S700, if the total of charges of the 
charge information has reached the upper limit in step S701, if it is 
decided in step S702 that... 3 is not correct, and if it is decided in 
step S706 that the signature of the price information is not correct, 
the processing proceeds to step S713 in each case, where error processing 
is... via the speaker. Thus, the record reproduction apparatus 250 can 
reproduce contents in this way. 

Here, if charge information corresponding to the ID of the contents 
is stored in the storage module 311 in step... 

...section 301 in the electronic distribution only recording medium 251 
refers to the reproduction limitation at the time when charge 
information is uncollected in step S737, and determines whether or not 
the contents whose charge information is uncollected satisfy 
reproduction available conditions. 

Then, if the contents do not satisfy the reproduction available... 

...been reproduced for the number of times defined in the reproduction 
limitation, or if a reproduction available period has lapsed) , the 
control section 310 of the encryption processing section 301 terminates 
this reproduction processing. On. . . 

...251 or the external memory 303, or may be stored in data of a handling 
policy or price information, or the like. 

Incidentally, the electronic distribution only recording medium 251 
may be provided in the ... distribution system 10, due to the increased 
generality of the electronic distribution only recording medium 251, 
until charge information for contents recorded in the electronic 
distribution only recording medium 251, by limiting utilization of the 
contents (limiting a number of times and a period of reproduction and 
copying) , illegal utilization of the contents can be prevented while the 

charge information is uncollected. 

According to the above-mentioned configuration, a save key Ksave) ) 
peculiar to the electronic ... the control section 91 of the encryption 
processing section 65 in the home server 51 saves the charge 
information (the charge information whose signature was verified in 
step S742) in the storage module 92, and at the same time , changes the 
ID of the encryption section (the ID of the encryption section of the 
apparatus that , . . 
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English Abstract 

A system, method, and article of manufacture are disclosed for providing 
a stream-based communication system, A shared format is defined on 
interface code for a sending system and a receiving system. A message to 
be sent from the sending system to the receiving system is translated 
based on the shared format. Once translated, the message is then sent 
from the sending system and received by the receiving system. Once the 
message is received by the receiving system, the message is then 
translated based on the shared format. 

French Abstract 

L' invention concerne un systeme, un precede et un article de production 
fournissant un systeme de communication en continu, Un format partage est 
defini selon un code d' interface pour un systeme emetteur et un systeme 
recepteur. Un message devant etre envoye par le systeme emetteur est 
traduit sur la base du format partage. Une fois traduit, le message est 
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Detailed Description 

. . . Typically, the algorithm is widely known, while the key is kept 
secret. There are several types of encryption in use today, including. 

secret key cryptography - uses one key (the secret key) both to encrypt 
the... of reports are supported by the reporting application framework. 

Scheduled: Scheduled reports are generated based upon a time and/or 
date requirement. 

These reports typically contain statistical information and are generated 
periodically (invoices and bills, for example) . 

On-demand: Some reports will be requested by users with specific 
parameters . . . 

...requirements are not known before the request is made, so these factors 
must be handled at request time 

Event-driven: This report type includes reports whose generation is 
triggered based on a business or system. . . 

...determines general information about the request, such as report type 
requester, quantity to be printed, and requested time . Based on the 
report type, a table of reports is examined in 
224 

order to gather additional... 

...requests and ensures that they are forwarded to the report writer 
process at the current or specified time . All report requests are 
processed in an asynchronous manner (for example, service requesters do 
not wait for. . . 

...containing information about each report that has been requested for 
generation, including . 

Requester lUD 

Report name 

Date/ time requested 

Status (requested, in process, complete, or error) 
Report-specific parameters. 
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10 The requester ID, report name, and date/ time are used to uniquely 
identify the report. These values are passed to APIs which request report 
status . . . 

...report records are removed from the table only after the output reports 
have been archived. Implementation and frequency of this table cleanup 
is to be determined in systems management design. 

Report Process Flows 
Report processing... 

...the report writer process for immediate generation or to the event 
manager for generation at a specified time (report scheduling) . 

The appropriate application report writer module generates the report, 
prints it if specified in the. . . 

. . .report generation and printing (optional) . 
Input data blocks specify the following. 

Report name 
Report parameters 

Report generation time (default is immediately) 
Printer name. 

230 

The report name must be one of the defined application report... 

. . .depending on the report type. Reports may be requested for generation 
immediately or at a designated future time . All reports are written to 
a reserved area on disk; however, specification of a printer causes the 



.of reports requested by users on demand. Typically, these reports will 
not have a set schedule or frequency for distribution. The report 
architecture must support distribution of these reports without the 
requirement of manual or. . . 

.architecture must support distribution of regularly scheduled reports. 
Typically, these reports will have a set schedule and frequency for 
distribution. The report distribution package must support distribution 
of these reports without the requirement of manual ... requi red) . This 
criterion can be satisfied by automatic creation of banner pages or other 
means , 

14. Delivery Costing : To provide sufficient information to users to 
avoid accidentally downloading or printing very large reports during peak 
usage hours, a distribution costing function can be useful. This 
function would warn users of reports that would overload the network or a 
printer. This costing function might provide recipients with a rough 
estimate of the amount of time that distribution might take. Finally, 
during the online day, the delivery costing mechanism might disallow 
transmission of reports that exceed a predeten-nined cost 

15. Multiple Destinations: The report architecture should support 
distribution of a single report to single or multiple ... with large, 
mission-critical systems has shown that the most complex issues require 
strategic tradeoffs between quality, cost , and time . These tradeoffis 
usually involve interdependent considerations between strategy, 
technology, process, and people. See Figure 34 which illustrates... 
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.detailed level. For example, how should an architecture be customized to 
better support performance, at the 

potential cost of increased coupling between components? 

Many of these considerations have been addressed over the last few years 
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tide of manufacture are provided for delivering 
ressable interface. A plurality of interfaces 
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the interfaces. Each interface has a unique set of 
services associated therewith. Each of the interfaces is named with a 
name indicative of the unique set of services associated therewith. The 
names of the interfaces are then broadcast to a plurality of systems 
requiring service . 
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republished upon receipt of that report. 

Examination 20010927 Request for preliminary examination prior to end of 

19th month from priority date 

Search Rpt 20030109 Late publication of international search report 

Republication 20030109 A3 With international search report. 

Main International Patent Class: G06F-009/46 
Fulltext Availability: 
Detailed Description 

Detailed Description 

types of browsers, SafePassage will provide client authentication 
certificates and full-strength encryption (128 bit) . 

Encryption 1552 

Encryption services encrypt data prior to network transfer to prevent 
unauthorized interception. 

(Note that encryption can occur within the... may be required. 

Synchronous push/pull services provide a mechanism for applications to be 
notified in real time if a subscribed item changes >(e.g., a stock 
ticker). Asynchronous push/pull services do not require... 

...of reports are supported by the reporting application framework. 

Scheduled: Scheduled reports are generated based upon a time and/or 
date requirement. 

These reports typically contain statistical information and are generated 
periodically (invoices and bills, for ...requirements are not known 
before the request is made, so these factors must be handled at request 
time 

Event-driven: This report type includes reports whose generation is 
triggered based on a business or system. . . 

...determines general information about the request, such as report type, 
requester, quantity to be printed, and requested time . Based on the 
report type, a table of reports is examined in order to gather additional 
report . . . 

...requests and ensures that they are forwarded to the report writer 
process at the current or specified time . All report requests are 
processed in an asynchronous manner (for example, service requesters do 
not wait for . . . 

...containing information about each report that has been requested for 
generation, including. 

Requester ID 
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Report name 

Date/ time requested 

Status (requested, in process, complete, or error) 
Report-specific parameters. 

The requester ID, report name, and date/ time are used to uniquely 
identify the report. These values are passed to APIs which request report 
status ... report records are removed from the table only after the output 
reports have been archived. Implementation and frequency of this table 
cleanup is to be determined in systems management design. 

Report Process Flows 
Report processing... 

...the report writer process for immediate generation or to the event 
manager for generation at a specified time {report scheduling) , 

The appropriate application report writer module generates the report, 

prints it if 

if 

spec led . . . 

...report generation and printing (optional). 
Input data blocks specify the following. 

Report name 
Report parameters 

Report generation time (default is immediately) 
Printer name. 

The report name must be one of the defined application report types.,. 

...depending on the report type. Reports may be requested for generation 
immediately or at a designated future time . All reports are written to 
a reserved area on disk; however, specification of a printer causes the 

...of reports requested by users on demand. Typically, these reports will 
not have a set schedule or frequency for distribution. The report 
architecture must support distribution of these reports without the 
requirement of manual or. . . 

...architecture must support distribution of regularly scheduled reports. 
Typically, these reports will have a set schedule and frequency for 
distribution. The report distribution package must support distribution 
of these reports without the requirement of manual ... required) . This 
criterion can be satisfied by automatic creation of banner pages or other 
means . 

14. Delivery Costing : To provide sufficient information to users to 
avoid accidentally downloading or printing very large reports during peak 
usage hours, a distribution costing function can be useful. This 
function would warn users of reports that would overload the network or a 
printer. This costing function might provide recipients with a rough 
estimate of the amount of time that distribution might take. Finally, 
during the online day, the delivery costing mechanism might disallow 
transmission of reports that exceed a predetermined cost 

15. Multiple Destinations: The report architecture should support 
distribution of a single report to single or multiple ... with large, 
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mission-critical systems has shown that the most complex issues require 
strategic tradeoffs between quality, cost , and time . These tradeoffs 
usually involve interdependent considerations between strategy, 
technology, process, and people. See Figure 34 which illustrates... 

. . . level . For 
256 

example, how should an architecture be customized to better support 
performance, at the 

potential cost of increased coupling between components? 

Many of these considerations have been addressed over the last few years 
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English Abstract 

A system, method and article of manufacture are provided for batching 
logical requests for reducing network traffic. A group of business 
objects necessary for a transaction are provided and managed in a logical 
unit of work. Logically-related requests received from the logical unit 
of work are grouped into a single network message which is then stored. 
The message is sent upon receiving an order to send the message. 
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14. Delivery Costing : To provide sufficient information to users to 
avoid accidentally downloadina or printing very large reports during peak 
usage hours, a distribution costing function can be useful. This 
function would warn users of re^ports tha^t would overload the network or a 
printer. This costing function might pyovide recipients with a rough 
estimate of the amount of time t\at distribution might take. Finally, 
during the online day, the delivery costing mechanism might disallow 
transmission of reports that exceecl at predetermined cost 

15. Multiple Destinations: The reporst architecture should support 
distribution of a single report toysingle or multiple ... with large, 
mission-critical systems has shown/ thats. the most complex issues require 
strategic tradeoffs between quali/cy, cost. , and time . These tradeoffs 
usually involve interdependent consideratrtsms between strategy, 
technology, process, and people/ See Figure^24 which illustrates... 

..detailed level. For example,/ how should an architecture be customized to 
better support performance, yat the 

potential cost of increased/ coupling between components? 

Many of these consideratiams have been addressed over the last few years 
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claims 

Fulltext Word Count: 150863 



English Abstract 

A system, method, and article of manufacture are provided for 
implementing business logic service patterns for allowing reuse of a 
business object in a component-based architecture. An attribute 
dictionary pattern is used for controlling access to data of a business 
object via an attribute dictionary. A constant class pattern is provided 
for ensuring correct data at an attribute level. The patterns are 
utilized for reusing a business object which is classified as a business 
component, a business service, and/or a business facility. 



French Abstract 

L' invention porte sur un systeme, un procede et un article de fabrication 
s'appliquant a la mise en oeuvre de structures de services de logique de 
commerce en vue d'etre autorise a utiliser un objet commercial dans une 
architecture a base de composants. Une structure de dictionnaire 
d'attributs est utilisee pour commander 1 ' acces aux donnees d ' un objet 
commercial via un dictionnaire d'attributs. Une structure de classement 
constant assure la correction des donnees a un niveau d'attributs. Les 
structures sont utilisees pour reutiliser un objet commercial classifie 
comme composant commercial, service commercial et/ou installation 
commerciale . 



Legal Status (Type, Date, Text) 

Publication 20010308 A2 Without international search report and to be 

republished upon receipt of that report. 
Search Rpt 20030109 Late publication of international search report 
Republication 20030109 A3 With international search report. 

Main International Patent Class: G06F-009/44 
International Patent Class: G06F-009/46 
Fulltext Availability: 
Detailed Description 

Detailed Description 

. . . types of browsers, SafePassage will provide client authentication 
certificates and full-strength encryption {128 bit) . 

Encryption 1552 

Encryption services encrypt data prior to network transfer to prevent 
unauthorized interception. 



(Note that encryption can occur within the... 



..Services layer, the Transport Services layer, or the Network Media 
Services layer.) Within the Communications Services layer, encryption 
occurs at the top of the protocol stack and is typically performed within 
an application (e.g... frame relay). In this case, all data is encrypted 
before it is placed on the wire. Such encryption tools are generally 
hardware products. Encryption at this level has the advantage of being 
transparent to higher. . .may be required. 

Synchronous push/pull services provide a mechanism for applications to be 
notified in real time if a subscribed item changes (e.g., a stock 
ticker). Asynchronous push/pull services do not require... 

..of reports are supported by the reporting application framework. 

Scheduled: Scheduled reports are generated based upon a time and/or 
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date requirement. 

These reports typically contain statistical information and are generated 
periodically (invoices and bills, for example) . 

On-demand: Some reports will be requested by users ...requirements are 
not known before the request is made, so these factors must be handled at 
request time 

Event-driven: This report type includes reports whose generation is 
triggered based on a business or system. . . 

...determines general information about the request, such as report type, 
requester, quantity to be printed, and requested time . Based on the 
report type, a table of reports is examined in order to gather additional 
report . . . 

...requests and ensures that they are forwarded to the report writer 
process at the current or specified time . All report requests are 
processed in an asynchronous manner (for example, service requesters do 
not wait for . . . 

...containing information about each report that has been requested for 
generation, including. 

Requester ID 

Report name 

Date/ time requested 

Status (requested, in process, complete, or error) 
Report-specific parameters. 

The requester ID, report name, and date/ time are used to uniquely 
identify the report. These values are passed to APIs which request report 
status ... report records are removed from the table only after the output 
reports have been archived. Implementation and frequency of this table 
cleanup is to be deten-nined in systems management design. 
Report Process Flows 
Report . . . 

...the report writer process for immediate generation or to the event 
manager for generation at a specified time (report scheduling) . 

The appropriate application report writer module generates the report, 
prints it if specified in the... 

...report generation and printing (optional). 

Input data blocks specify the following. 

Report name 
Report parameters 

Report generation time (default is immediately) 
Printer name. 

The report name must be one of the defined application report types... 

...depending on the report type. Reports may be requested for generation 
immediately or at a designated future time . All reports are written to 
a reserved area on disk; however, specification of a printer causes the 
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..of reports requested by users on demand. Typically, these reports will 
not have a set schedule or frequency for distribution. The report 
architecture must support distribution of these reports without the 
requirement of manual or. . . 

..architecture must support distribution of regularly scheduled reports. 
Typically, these reports will have a set schedule and frequency for 
distribution. The report distribution package must support distribution 
of these reports without the requirement of manual ... required) . This 
criterion can be satisfied by automatic creation of banner pages or other 
means . 

232 

. Delivery Costing : To provide sufficient inf ori-nation to users to 
avoid accidentally downloading or printing very large reports during peak 
usage hours, a distribution costing function can be useful. This 
function would wam users of reports that would overload the network or a 
printer. This costing function might provide recipients with a rough 
estimate of the amount of time that distribution might take. Finally, 
during the online day, the delivery costing mechanism might disallow 
transmission of reports that exceed a predetennined cost 

15. Multiple Destinations: The report architecture should support 
distribution of a single report to single or multiple ... been used to 
regulate delays and deadlines such as those associated with government 
regulations, contractual obligations, accounting periods , customer 
service, and sales lead follow-up. Typical workflow goals are shorter 
time to market and quicker response times. 

Are multiple people involved in the business process? 
Is there a . . . 

..of documents in which the rules for a certain document can be defined 
for most of the time . Examples include accounts payable, insurance 
claims processing, and loan processing. A collaborative environment 
involves multiple departments viewing ... system of forces, wherever the 
context makes it relevant. 

The pattern is, in short, at the same time a thing, which happens in 
the world, and the rule which tells us how to create that... with large, 
mission-critical systems has shown that the most complex issues require 
strategic tradeoffs between quality, cost , and time . These tradeoffs 
usually involve interdependent considerations between strategy, 
technology, process, and people. See Figure 34 which illustrates... 

. . level . For 
251 

example, how should an architecture be customized to better support 
performance, at the 

potential cost of increased coupling between components? 

Many of these considerations have been addressed over the last few years 
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the online day, the delivery costing mechanism might disallow 
transmission of reports that exceed a predetermined cost 

15. Multiple Destinations: The report architecture should support 
distribution of a single report to single or multiple ... with large, 
mission-critical systems has shown that the most complex issues require 
strategic tradeoffs between quality, cost , and time . These tradeoffs 
usually involve interdependent considerations between strategy, 
technology, process, and people. See Figure 34 which illustrates... 

. . . level . For 
252 

example, how should an architecture be customized to better support 
performance, at the 

potential cost of increased coupling between components? 

Many of these considerations have been addressed over the last few years 
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Claims 

Fulltext' Word Count: 150446 
English Abstract 

A system, method, and article of manufacture are provided for managing 
constants in a computer program. A plurality of constant names are 
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provided. Each of the constant names has a corresponding constant value. 
The constant names are grouped into constant classes based on an entity 
which the constant values represents. Access is allowed to the constant 
values by receiving a call including the corresponding constant name and 
corresponding constant class. 
French Abstract 

L' invention porte sur un systeme, un precede et un article de gestion des 
constantes d*un programme d * ordinateur . On etablit les noms de 
differentes constantes a chacun desquels correspond la valeur d ' une 
constants, puis les noms sont regroupes par classes de constantes en 
fonction d*une entite representant les valeurs des constantes. L'acces a 
une valeur de constants est autorise lors de la reception d'un appel 
comprenant le nom et la classe de la constants corrsspondants . 

Legal Status (Type, Date, Tsxt) 

Publication 20010308 A2 Without international search report and to be 

republished upon receipt of that report. 

Examination 20010809 Request for preliminary examination prior to end of 

19th month from priority dats 

Ssarch Rpt 20020502 Late publication of international search report 

Republication 20020502 A3 With intsrnational ssarch rsport . 

Main Intsrnational Patsnt Class: G06F-009/44 
Fulltext Availability: 
Dstailsd Description 

Detailed' Description 

. . . and authentication to snabls secure data communications over public 
networks such as the Internet. 

The nssd for Encryption Services is particularly strong where 
electronic commercs solutions that involve exchanging sensitive or 
financial data are to be... of reports are supported by the reporting 
application framework. 

Schedulsd: Scheduled rsports are generated based upon a time and/or 
dats rsquirement. 

Thsss rsports typically contain statistical infon-nation and are 
generated periodically (invoices and bills, for example) . 

...requirements are not known bsfors ths request is mads, so thsss 
factors must bs handled at request time 

Event-driven: This rsport type includes rsports whoss gsnsration is 
triggsrsd based on a business or system. . . 

...nines general information about the request, such as report type, 
requester, quantity to be printed, and requested time . Based on the 
report type, a table of reports is examined in order to gather additional 
report . . . 

...requests and ensures that they are forwarded to ths report writer 
process at ths current or specified time . All report requests are 
processed in an asynchronous manner (for sxampls, servics rsqussters do 
not wait for. . . 

...containing information about each rsport that has been requested for 
generation, including . 
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Requester ID 

Report name 

Date/ time requested 

Status (requested, in process, complete, or error) 
Report-specific parameters. 

The requester ID, report name, and date/ time are used to uniquely 
identify the report. These values are passed to APIs which request report 
status ... report records are removed from the table only after the output 
reports have been archived. Implementation and frequency of this table 
cleanup is to be determined in systems management design. 
Report Process Flows 
Report processing. . . 

...the report writer process for immediate generation or to the event 
manager for generation at a specified time {report scheduling) . 

The appropriate application report writer module generates the report, 
prints it if specified in the... 

. . .report generation and printing (optional) . 

Input data blocks specify the following. 

Report name 
Report parameters 

Report generation time (default is immediately) 
Printer name. 

The report name must be one of the defined application report types... 

...depending on the report type. Reports may be requested for generation 
immediately or at a designated future time . All reports are written to 
a reserved area on disk; however, specification of a printer causes the 

...of reports requested by users on demand. Typically, these reports will 
not have a set schedule or frequency for distribution. The report 
architecture must support distribution of these reports without the 
requirement of manual or. . . 

...architecture must support distribution of regularly scheduled reports. 
Typically, these reports will have a set schedule and frequency for 
distribution. The report distribution package must support distribution 
of these reports without the requirement of manual ... required) . This 
criterion can be satisfied by automatic creation of banner pages or other 
means . 

233 

. Delivery Costing : To provide sufficient infortnation to users to 
avoid accidentally downloading or printing very large reports during peak 
usage hours, a distribution costing function can be useful. This 
function would warn users of reports that would overload the network or a 
printer. This costing function might provide recipients with a rough 
estimate of the amount of time that distribution might take. Finally, 
during" the online day, the delivery costing mechanism might disallow 
transmission of reports that exceed a predetermined cost 

15. Multiple Destinations: The report architecture should support 
distribution of a single report to single or multiple ... with large, 
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mission-cnitical systems has shown that the most complex issues require 
strategic tradeoffs between quality, cost , and time . These tradeoffs 
usually involve interdependent considerations between strategy, 
technology, process, and people. See Figure 34 which illustrates... 

. level . For 
252 

example, how should an architecture be customized to better support 
performance, at the 

potential cost of increased coupling between components? 

Many of these considerations have been addressed over the last few years 
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English Abstract 

A system, method, and article of manufacture are provided for affording 
access to a legacy system. A plurality of components coupled to a client 
via a component integration architecture are provided for servicing the 
client. A legacy system is interconnected to the client via the 
integration architecture using a legacy wrapper. The legacy system and 
the client are interfaced via the legacy wrapper by communicating with 
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14. Delivery Costing : To provide sufficient information to users to 
avoid accidentally downloading or printing very large reports during peak 
usage hours, a distribution costing ?o function can be useful. This 
function would warn users of reports that would overload the network or a 
printer. This costing function might provide recipients with a rough 
estimate of the amount of time that distribution might take. Finally, 
during the online day, the delivery costing mechanism might disallow 
transmission of reports that exceed a predetermined cost 

15. Multiple Destinations: The report architecture should support 
distribution of a single report Z5 to single or... with large, 
mission-critical systems has shown that the most complex issues require 
strategic tradeoffs between quality, cost , and time . These tradeoffs 
usually involve interdependent considerations between strategy, 
technology, process, and people. See Figure 34 which illustrates... 

.detailed level. For example, how should an architecture be customized to 
better support performance, at the 

potential cost of increased coupling between components? 

Many of these considerations have been addressed over the last few years 
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FRAGMENTAIRE DANS UN ENVIRONNEMENT DE MODELES DE SERVICES 

D » INFORMATIONS 
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ACCENTURE LLP, 1661 Page Mill Road, Palo Alto, OA 94304, US, US 
(Residence) , US (Nationality) 
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BOWMAN-ANUAH Michel K, 6426 Peak Vista Circle, Colorado Springs, CO 80918 
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Legal Representative: 

HICKMAN Paul L (agent), Oppenheimer Wolff & Donnelly, LLP, 38th Floor, 
2029 Century Park East, Los Angeles, CA 90067-3024, US, 
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Main International Patent Class: G06F-009/44 
Publication Language: English 
Filing Language: English 
Fulltext' Availability: 
Detailed Description 
Claims 



http : //www , d i al ogcl assi c. com/m ai n . v m gw 



12/22/03 



DialogClassic Web(tm) 



Page 42 of 62 



Fulltext Word Count: 150355 
English Abstract 

A system, method and article of manufacture are provided for providing a 
warning upon retrieval of objects that are incomplete. An object is 
provided with at least one missing attribute. Upon receipt of a request 
from an application for the object access to the attributes of the object 
is allowed by the application. A warning is provided upon an attempt to 
access the attribute of the object that is missing. 
French Abstract 

L' invention concerne un systeme, un precede et un article de fabrication 
concus pour emettre un avertissement lors de 1' extraction d'objets qui 
sont incomplets. L'objet fourni presente au moins un attribut manquant. 
Des la reception d ' une requete d'une application pour l'objet, ladite 
application autorise 1 ' acces aux attributs de cet objet. Un avertissement 
est emis lorsque 1 ' on tente d'acceder a 1' attribut manquant de l'objet. 

Legal Status (Type, Date, Text) 

Publication 20010308 A2 Without international search report and to be 

republished upon receipt of that report. 

Examination 20011018 Request for preliminary examination prior to end of 

19th month from priority date 

Search Rpt 20011122 Late publication of international search report 

Republication 20011122 A3 With international search report. 

Main International Patent Class: G06F-009/44 
Fulltext Availability: 
Detailed Description 

Detailed Description 

types of browsers, 
certificates and full 

Encryption 1552 

Encryption services encrypt data prior to network transfer to prevent 
unauthorized interception. 

{Note that encryption can occur within the... may be required. 

Synchronous push/pull services provide a mechanism for applications to be 
notified in real time if a subscribed item changes (e.g., a stock 
ticker). Asynchronous push/pull services do not require... 

...of reports are supported by the reporting application framework. 

Scheduled: Scheduled reports are generated based upon a time and/or 
date requirement. 

These reports typically contain statistical information and are generated 
periodically (invoices and bills, for example) . 

On-demand: Some reports will be requested by users with specific 
parameters . . . 

...requirements are not known before the request is made, so these factors 
must be handled at request time 

Event-driven: This report type includes reports whose generation is ... 
determines general information about the request, such as report type, 
requester, quantity to be printed, and requested time . Based on the 
report type, a table of reports is examined in 



SafePassage will provide client authentication 
-strength encryption (128 bit) . 
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223 

order to gather additional... 

...requests and ensures that they are forwarded to the report writer 
process at the current or specified time . All report requests are 
processed in an asynchronous manner (for example, service requesters do 
not wait for . . . 

...containing information about each report that has been requested for 
generation, including . 

Requester ID 

Report name 

Date/ time requested 

Status (requested, in process, complete, or error) 
Report-specific parameters. 

The requester ID, report name, and date/ time are used to uniquely 
identify the report. These values are passed to APIs which request report 
status ... report records are removed from the table only after the output 
reports have been archived. Implementation and frequency of this table 
cleanup is to be determined in systems management design. 

Report Process Flows 
Report processing. . . 

...the report writer process for immediate generation or to the event 
manager for generation at a specified time (report scheduling) . 

The appropriate application report writer module generates the report, 
prints it if specified in the. . . 

...report generation and printing (optional). 

Input data blocks specify the following. 

Report name 
Report parameters 

Report' generation time (default is immediately) 
Printer name. 

229 

The report name must be one of the defined application report... 

...depending on the report type. Reports may be requested for generation 
immediately or at a designated future time . All reports are written to 
a reserved area on disk; however, specification of a printer causes the 

...of reports requested by users on demand. Typically, these reports will 
not have a set schedule or frequency for distribution. The report 
architecture must support distribution of these reports without the 
requirement of manual or. . . 

...architecture must support distribution of regularly scheduled reports. 
Typically, these reports will have a set schedule and frequency for 
distribution. The report distribution package must support distribution 
of these reports without the requirement of manual ... required) . This, 
criterion can be satisfied by automatic creation of banner pages or other 
means . 
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14. Delivery Costing : To provide sufficient information to users to 
avoid accidentally downloading or printing very large reports during peak 
usage hours, a distribution costing function can be useful. This 
function would warn users of reports that would overload the network or a 
printer. This costing function might provide recipients with a rough 
estimate of the amount of time that distribution might take. Finally, 
during the online day, the delivery costing mechanism might disallow 
transmission of reports that exceed a predetermined cost . 

15. Multiple Destinations: The report architecture should support 
distribution of a single report to single or mul tiple . . . wi th large, 
mission-critical systems has shown that the most complex issues require 
strategic tradeoffs between quality, cost , and time . These tradeoffs 
usually involve interdependent considerations between strategy, 
technology, process, and people. See Figure 34 which illustrates... 

..detailed level. For example, how should an architecture be customized to 
better support performance, at the 

potential cost of increased coupling between components? 

Many of these considerations have been addressed over the last few years 
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(EA) AM AZ BY KG KZ MD RU TJ TM 
Main International Patent Class: G06F-009/46 
Publication Language: English 
Filing Language: English 
Fulltext Availability: 

Detailed Description 

Claims 
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Legal Status (Type, Date, Text) 

Publication 20001207 A2 Without international search report and to be 

republished upon receipt of that report. 
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19th month from priority date 

Search Rpt 20010525 Late publication of international search report 

Republication 20010525 A3 With international search report. 

Main International Patent Class: G06F-017/60 
Fulltext Availability: 
Detailed Description 

Detailed Description 

invention; Figure 11-1 is a flowchart providing more detail of the 
method for mapping products or services in a network framework in 
accordance with one embodiment of the 
present inventions- 
Figure U is a... or graphical representations of control or data flows. 

Graphical Representation 

Graphical representation tools are used to display important system 
information in a form, which is easier to assimilate. These tools may, 
for example, produce structure... 
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Main International Patent Class: G06F-001/00 

Publication Language: English 
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Detailed Description 

Claims. 

Fulltext Word Count: 17535 
English Abstract 

Security services and policy enforcement for electronic data is provided 
through a series of transactions among a server and clients using 
electronic security certificates. A first client generates a digest from 
the electronic data using a one-way hashing algorithm, and submits a 
security certificate request containing the digest to a trusted 
arbitrator server, where the request is time stamped and logged. The 
trusted arbitrator authenticates the first client's credentials, 
digitally signs the digest, creates and registers the security 
certificate with digest information, and returns the security certificate 
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to the first client. The first client combines the electronic data with 
the security certificate to create a distribution unit. A second client 
acquires the distribution unit, extracts the certificate security 
certificate, generates a digest from the data using same hashing 
algorithm, and either compares the computed digest with the signed digest 
in the security certificate, or submits a validation request containing 
the security certificate serial number and digest to the trusted 
arbitrator server. If the digest from the second client matches the 
logged digest from the first client, the electronic data is valid. 
Depending on the certificate type and policy level, the trusted 
arbitrator server provides other services to the clients, such as 
notification of updates to the data, notification of improper user of the 
data, and payment for the use of the data. 

French Abstract 

L* invention concerne la mise en oeuvre de services et de politique de 
securite pour donnees electroniques , par une serie de transactions entre 
un serveur et des clients utilisant des certificats de securite 
electroniques. Un premier client etablit un resume de donnees 
electroniques au moyen d'un algorithme de calcul d'adresses, puis il 
soumet une demande de certificat de securite contenant ce resume a un 
serveur d*arbitrage fiable, ou la demande est horodatee et enregistree. 
Le serveur authentifie les elements d*identite du premier client, signe 
numeriquement le resume, cree et enregistre le certificat de securite au 
moyen de 1 * information de resume, et renvoie le certificat au premier 
client, lequel combine les donnees electroniques et le certificat pour 
etablir une unite de distribution. Un second client acquiert 1 'unite de 
distribution, extrait le certificat de securite, etablit un resume a 
partir des donnees en utilisant le meme algorithme de calcul d'adresses, 
et compare le resume etabli avec le resume signe dans le certificat ou 
soumet une demande de validation contenant le numero de serie du 
certificat et le resume au serveur d' arbitrage fiable. Si le resume du 
second client correspond au resume enregistre du premier client, les 
donnees electroniques sont valables . En fonction du type de certificat et 
du niveau de politique de securite, le serveur assure d'autres services 
aux clients comme la notification des mises a jour de donnees, la 
notification d * utilisation impropre des donnees et le paiement relatif a 
1 ' utilisation des donnees. 



Main International Patent Class: G06F-001/00 

Fulltext Availability: 
Detailed Description 

Detailed Description 

Number of users and/or machines policy 
One or more concurrent [userlmachine] 
No concurrent [userslmachines ] 
Length of time of use policy 
Use only while subscribed to service 
Use for set duration when running 
Use for set duration since installation 
Usage ends on Time and Date 
Unlimited 

Credentials policy 

No credentials required 

Adult material (user must be registered as adult) 
Groups ... subscribers can access 
Subscribers at certain level can access 
Update policy 

Update when original data changed 
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Update periodically 

Period to update 

Update on payment 

Update on demand 

Consignment Service block 

Version of Consignment Service 

36 

Number of policies (zero or more) 

Consignment policies 

In 

Cost Policy 
Free 

Amount per license 

Data Encryption Service block 

Version of Encryption Service 

Encryption Algorithm used 

I 0 Version of Encryption Algorithm 

I 

Alcrorithrnic Information 
Users which can unlock data... 
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An accounting apparatus and an information distribution system using the 

accounting apparatus 
Abrechnungsvorrichtung und ein die Abrechnungsvorrichtung verwendendes 

Inf ormationsverteilungssystem 
Appareil de comptabilisation et systeme de distribution d ' inf ormations 

utilisant cet appareil 
PATENT ASSIGNEE: 

CANON KABUSHIKI KAISHA, (542361), 30-2, 3-chome, Shimomaruko, Ohta-ku, 
Tokyo, (JP), (Proprietor designated states: all) 
INVENTOR : 

Iwamura, Keiichi, Canon Kabushiki Kaisha, 30-2, Shimomaruko 3-chome, 
Ohta-ku, Tokyo, (JP) 
LEGAL REPRESENTATIVE: 

Beresford, Keith Denis Lewis et al (28273), BERESFORD & Co. 2-5 Warwick 
Court, High Holborn, London WCIR 5DH, (GB) 
PATENT (CC, No, Kind, Date) : EP 788080 A2 970806 (Basic) 

EP 788080 A3 981014 
EP 788080 Bl 030528 
APPLICATION (CC, No, Date) : EP 97300592 970130; 
PRIORITY (CC, No, Date): JP 9616081 960131; JP 9616082 960131 
DESIGNATED STATES: DE ; FR; GB 

INTERNATIONAL PATENT CLASS: G07F-017/16; G07F-007/10 

CITED PATENTS (EP B) : EP 537756 A; EP 594493 A; WO 94/01825 A; US 4751732 A 

CITED REFERENCES (EP B) : 

MORI R ET AL: "SUPERDISTRIBUTION : THE CONCEPT AND THE ARCHITECTURE" 
TRANSACTIONS OF THE INSTITUTE OF ELECTRONICS, INF0Rr4ATI0N AND 
COMMUNICATION ENGINEERS OF JAPAN, vol. E73, no. 7, July 1990, pages 
1133-1146, XP002 010383; 

ABSTRACT EP 788080 A2 

An accounting apparatus has a money input, by which a user can input an 
amount of money into the apparatus. A receiver receives a body of 
information transmitted over a communication medium, and a register is 
arranged to store at least two data received with such body of 
information. A control unit processes the at least two data in the 
register received with such body of information, and the amount input by 
the user via the money input, and an indicator indicates to the user 
whether the user is permitted access to the body of information, based on 
a result of processing provided by the control unit. 

ABSTRACT WORD COUNT: 108 

NOTE: 

Figure number on first page: 2 

LEGAL STATUS (Type, Pub Date, Kind, Text) : 
Examination: 001129 A2 Date of dispatch of the first examination 

report: 20001012 

Application: 970806 A2 Published application (Alwith Search Report 

;A2without Search Report) 
Grant: 030528 Bl Granted patent 

Change: 030423 A2 Title of invention (German) changed: 20030305 

Search Report: 981014 A3 Separate publication of the European or 

International search report 
Examination: 990428 A2 Date of filing of request for examination: 
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LANGUAGE ( Publication, Procedural , Application) : English; English; English 
FULLTEXT AVAILABILITY: 



Available Text 
CLAIMS A 
CLAIMS B 
CLAIMS B 
CLAIMS B 
SPEC A 
SPEC B 
Total word count 
Total word count 
Total word count 



Language 
(English) 
(English) 
(German) 
(French) 
(English) 
(English) 

document A 
document B 



Update 
199708W1 
200322 
200322 
200322 
199708W1 
200322 



documents A + B 



Word Count 
872 

1160 

1007 

1204 
11726 
11468 
12600 
14839 
27439 



.SPECIFICATION PP (if such is the case), and then the user is shown a 
list of the available encryption services , with the charge for 
each. This is preferably done by the information provider sending the 
various possible TID's to... 

.SPECIFICATION of encryption to be used, or selects from among several 
offered combinations of security strength and processing speed , or the 
like. More specifically, in this embodiment, the checking unit 14 
initially determines that the user... 

. PP (if such is the case), and then the user is shown a list of the 
available encryption services , with the charge for each. This is 
preferably done by the information provider sending the various possible 
TID' s to. . . 
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PORTABLE, SECURE TRANSACTION NSYS 

G£ 




FOR PROGRAMMABLE, INTELLIGENT DEVICES 
TRANSACTIONNELLE DESTINE A DES UNITES 



SYSTEME PORTABLE SUR DE 

PROGRAMMABLES INTELLIGENTES 

Patent Applicant/Assignee: 
EUROPAY INTERNATIONAL N V, 
HEYNS Guido, 
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Inventor ( s ) : 
HEYNS Guido, 
JOHANNES Peter, 
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Priority Application: GB S613450 19960627\ 

Designated States: AL AM AT AU AZ BA BB BG BR^BY CA CH CN CU CZ DE DK EE ES 
FI GB GE GH HU IL IS JP KE KG KP KR KZ LC LK LR LS LT LU LV MD MG MK MN 
MW MX NO NZ PL PT RO RU SD SE SG SI SK TJ TM TR TT UA UG US UZ VN YU ZW 
GH KE LS MW SD SZ UG ZW AM AZ BY KG KZ MD RU TJ TM AT BE CH DE DK ES FI 
FR GB GR IE IT LU MC NL PT SE BF BJ CF CG CI CM GA GN ML MR NE SN TD TG 

Main International Patent Class: G07F-007/10 
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Detailed Description 
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Set Items Description 

51 17 (ENCRYPTION OR CRYPTOGRAPHIC) () SERVICE? 

52 19303 PRICE OR PRICING OR COST? OR CHARG? OR AMOUNT OR QUOTATION 

53 9 (COMPUTATION? OR CALCULATION? OR FIGURING OR RECKONING) (2N- 

) (BURDEN? OR CHARGE? OR COMMITMENT? OR DUTY OR OBLIGATION OR - 
RESPONSIBILITY) 

54 14 (PRIVACY OR CONFIDENTIALITY) (2N) (LEVEL OR STATUS OR STANDI- 

NG OR IMPORTANT? OR SCORE? OR RANK?) 

55 27329 SPEED OR TIME OR TIMING OR PERIOD? OR INTERVAL OR CLOCK OR 

SPACING OR FREQUENCY OR DURATION 

56 * 1 SI (S) S2 

57 0 SI (S) S3 

58 0 SI (S) S4 

59 1 SI (S) S5 

510 0 S6 (S) S9 

511 2 S6 OR S9 

512 2 Sll NOT PY>2000 

513 2 S12 NOT PD>20000619 



File 256 : Sof tBase : Reviews, Companies&Prods . 82-2003/Nov 
(c)2003 Info. Sources Inc 



http;//www.dialogclassic.com/main.vmgw 



12/22/03 



DialogClassic Web(tm) 



Page 1 of 2 



T S13/5/ALL 
13/5/1 

DIALOG (R) File 256 : Sof tBase : Reviews , Companies& Prods . 
(c)2003 Info. Sources Inc. All rts . reserv. 

00113933 DOCUMENT TYPE: Review 

PRODUCT NAMES: X.12 (832324) 

TITLE: X12 EDI Security: Safe Passage Over the Internet 

AUTHOR: DeGrafft, Hart W 

SOURCE: e-Business Advisor Magazine, vl7 nl p36(4) Jan 1999 
ISSN: 1098-8912 

HOMEPAGE: http://www.advisor.com 

RECORD TYPE: Review 

REVIEW TYPE: Product Analysis 

GRADE: Product Analysis, No Rating 

X12 electronic data interchange (EDI) security is a set of standards that 
demonstrate the security functions needed over the EDI range of products as 
companies migrate to Web-enabled EDI. Web-based EDI does not support 
automation, but eliminates paper, is quick, and is a lower-cost method for 
PC-users. Web-enabled EDI complements conventional EDI, and extends EDI to 
a new group of EDI users. One server, for example, can perform two sets of 
tasks for different user groups. It can host a World Wide Web EDI 
application and also export conventional EDI transactions throughout the 
back end to a larger company that has a volume of business and business 
processes concomitant with completely automated, machine- to-machine 
processing. The X.12 suite provides two primary security services that 
protect ANSI X.12 electronic transactions against risks possible when using 
the Internet to conduct business transactions. They are an electronic 
digital signature and data encryption. The digital signature provides a way 
to determine if an alteration has occurred to information signed; a way to 
definitely identify the person signing the document; and a way to bind the 
signed information to the signer's identity. Among topics covered are: 
evolution of X.12-based security standards; X.12 security advantages; X.i2 
security services explained; X.12. 58, which establishes conventions and 
syntax for open system EDI security solutions; data compression service 
cryptographic service message (X.12. 815); synergistic use of X.12. 58 and 
X.12. 815; network/protocol independence; and the future of EDI. 

COMPANY NAME: Vendor Independent (999999) 

DESCRIPTORS: Communications Standards; Data Communications; EDI 

(Electronic Data Interchange); Internet Marketing; Internet Utilities 
REVISION DATE: 20010330 
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PRODUCT NAMES: TriStrata Enterprise Security Server (TESS) 2.0 (716898) 

TITLE: TriStrata: A Giant Step In Enterprise Security 

AUTHOR: Backman, Dan 

SOURCE: Network Computing, v9 nl5 p28(3) Aug 15, 1998 
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ISSN: 1046-4468 

HOMEPAGE : http : //www. Ne two rkCompu ting . com 

RECORD TYPE: Review 
REVIEW TYPE: Review 
GRADE: A 

TriStrata Security's TriStrata Enterprise Security Server (TESS) 2.0 
represents a significant step forward in enterprise security technology. It 
provides a high-performance electronic commerce framework and broad-based 
authentication and encryption services. Its foundation is the relatively 
unknown but hypothetically unbreakable Vernal one-time pad cipher. 
Application-level and transport-level security services are supported with 
performance much better than that of current public key and symmetric key 
cryptosystems . TESS * s framework exposes its services at the application and 
network transport layers, unlike Common Object Request Broker Architecture 
(CORBA), Distributed Component Object Model (DOOM), and DCE . TriStrata also 
has another unusual feature: full compliance with federal export 
restrictions and licensing for export outside the U.S. and Canada. All of 
TriStrata 's products use Microsoft's technologies, including a security 
server that runs on a specially designed version of Windows NT 4.0 Server, 
and desktop application support for Windows 95, Windows 98, and Windows NT 
4.0. TriStrata plans support for other platforms as well. Four primary 
applications make up TriStrata 's security framework, in addition to the 
Enterprise Security Server. They are desktop file encryption, secure 
messaging, secure network transport services, and a software development 
toolkit . 
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